What is VLESS REALITY and how does it work?
MARZ VPN uses VLESS + REALITY with the XTLS Vision flow on Xray-core — a modern combination for a protected and efficient VPN connection. Here is how it works, in plain words.
Why VLESS + REALITY
- Encrypted connection: traffic between your device and the VPN server travels inside a TLS 1.3 connection.
- Looks like HTTPS: to the network, the connection resembles an ordinary secure connection to a website.
- Efficient data transfer: VLESS adds very little overhead, and XTLS Vision avoids needless extra work on traffic that is already encrypted.
- Your IP stays private from websites: while the VPN is working, the sites you visit see the server’s address, not yours.
- Easy to connect: one subscription link brings every setting — no keys to type in.
- Your choice of server: pick any of all available servers in the app and switch at any time.
VLESS: a lightweight protocol
VLESS is a protocol from the V2Ray/Xray family. Think of it as the envelope for your traffic: it recognises your subscription by a personal ID (UUID) and carries data with very little overhead. Protection comes from the security layer underneath — in MARZ VPN that is REALITY.
REALITY: protection that looks like a normal website
REALITY is a security layer built into Xray-core. It encrypts the connection between your app and the server with TLS 1.3 and X25519 key exchange. Instead of its own domain and certificate, the server presents the TLS handshake of an existing website, so the connection looks like ordinary HTTPS.
Only an app that knows the server’s public key and short ID — both are already in your subscription — can open the VPN connection. Anyone else who probes the server simply reaches the real website.
XTLS Vision: efficient data transfer
Most of what you open online is already HTTPS. The xtls-rprx-vision flow recognises this traffic and passes it on without encrypting it a second time, which lowers overhead and smooths out the typical “TLS inside TLS” patterns.
Vision is not an extra encryption layer: other traffic is encrypted by REALITY, and HTTPS traffic stays protected by the websites’ own TLS encryption.
Using it with MARZ VPN
There is nothing to configure by hand. Get your subscription link in the Telegram bot or on this website and import it into Hiddify or Karing: the app shows all available servers with every parameter filled in. Choose a server and tap connect.
FAQ: what to expect
- Does it make me anonymous? A VPN protects the connection, but accounts you sign in to still know who you are.
- Does it work in every network? No technology can guarantee that. If a server does not connect, choose another one from all available servers.
- Can a server address be blocked? Yes, like any address on the internet — that is why you can switch to another server in the app at any time.
From zero to connected
- Choose your device.
- Install the app from the official store: Hiddify on Android, Hiddify on iPhone, Hiddify on a computer.
- Choose Trial in Telegram (3 days or 3 GiB), or buy Basic or Unlimited on this website.
- Open the secure setup page after a web purchase, or tap “🔑 My VPN” in the bot to get your subscription.
- Copy the link and add it as a subscription in the app.
- Choose a server — USA, Sweden or Russia — and connect.
- Save the recovery link for web purchases; use “🔑 My VPN” for bot subscriptions. Renew from the same account.