GigaTap combines VPN access, practical privacy tools, setup guides, and ecosystem apps in one public entrypoint.
- Articles - VPN, privacy, OPSEC, and security guides.
- English article archive - All English GigaTap articles.
- Russian article archive - All Russian GigaTap articles.
- VPN guides - Setup, clients, protocols, and troubleshooting routes.
- VPN start - Choose setup, docs, support, or profile checks.
- Privacy guides - Browser hardening, public Wi-Fi, tracking, and data hygiene.
- Security guides - Supply-chain risk, AI-agent boundaries, and operational defense.
- OPSEC guides - Threat models, compartmentalization, and safer daily workflows.
- Docs - Setup documentation, client notes, protocols, and troubleshooting.
- Contacts - Official support and security contact paths.
- Active Probing and Why a Server Must Stay Silent Consistently - Passive analysis only flags a suspicious address; then the censor connects itself. What gives away a server that simply does not answer, and why silence has to be consistent.
- Chains and Multihop: What They Give You and What They Cost - A second hop solves specific problems and creates new ones. What a chain actually buys, why a fallback path is not failover, and the trace multihop leaves in traffic.
- Choosing a Transport Family: Vulnerability Profiles, Not a Ranking - Transports cannot be ranked by strength — their vulnerability profiles differ in kind, not in degree. Four families across five axes, and the rule of diverse failure modes.
- Config Delivery: How a Broken Subscription Locks a User Out - The worst state a service can reach is one where restoring access requires the access you do not have. The circular trap, domain migration, and channel independence.
- DNS in Circumvention: The First Step and the First Leak - Name resolution happens before the connection and announces intent before protection starts. Three roles DNS plays, the silent fallback, and where to resolve names.
- ECH: What It Actually Solves, and What It Does Not - Encrypting the name in a TLS handshake closes one leak and leaves the rest untouched. What stays visible, why the anonymity set decides, and when it is a liability.
- Measuring Blocking Correctly - A probe must measure the quantity by which the network actually breaks. Four requirements: volume, seriality, failure classification and vantage point.
- Why Looking Random Is Not the Same as Looking Normal - A fully encrypted stream with no structure does not blend into traffic — it forms a class of its own. Why removing a signature does not deliver indistinguishability.
- Silent Failures That Look Like Blocking - Some failures happen with no error at all: the server drops the client silently, and from outside that is indistinguishable from blocking. A catalogue, and why to check it first.
- Three Axes of Traffic Shape: Why Two Mechanisms Demand Opposite Settings - One restriction demands splitting connections, another demands merging them. The contradiction dissolves once count, concurrency and volume become independent axes.