QUIC Transport Mode
How NymVPN will provide the tools to leap over the walls of the internet
Understanding decentralized VPNs, multi-hop encryption, and their privacy tradeoffs
How the fastest VPN encryption protocol available works
QUIC is a modern, open-sourced transport protocol standardized by the IETF in RFC 9000. Unlike HTTPS, which uses TLS encryption on top of TCP, QUIC is built directly on UDP while adding its own encryption, reliability, and performance improvements.
In practice, QUIC is most commonly used as the foundation for HTTP/3, the latest version of the web’s browsing protocol. QUIC handles how data moves across the internet, while HTTP/3 defines how that data is structured and exchanged.
Because HTTP/3 is now widely adopted and built on top of QUIC, traffic carried over QUIC from the outside looks like standard, everyday web browsing activity.
Censors often rely on DPI to block generic VPN protocols, especially those that use unencrypted or easily identifiable UDP patterns. QUIC, however, has become a mainstream protocol that is widely used across the internet. Large cloud providers around the world rely on it, and according to Cloudflare, more than 30% of their traffic in 2023 was already using HTTP/3 over QUIC.
Blocking QUIC outright would disrupt a significant portion of the modern internet, making it an unattractive option for most network operators. This widespread adoption makes QUIC an ideal wrapper for WireGuard, giving you a stable, censorship-resistant way to stay connected.
QUIC Transport Mode
Helps bypass firewalls and censorship when using fast mode. It does this by adding a QUIC layer around your WireGuard connection, making it much harder for firewalls or Deep Packet Inspection (DPI) systems to recognize and block your NymVPN traffic.
WireGuard uses UDP traffic, which can sometimes be restricted or flagged by network filters. With QUIC Transport Mode enabled, your VPN connection is hidden inside a QUIC session.
To outside observers, this traffic no longer looks like a VPN tunnel but instead is disguised as standard HTTPS/HTTP/3 traffic. This makes it significantly harder for censors to block.
