EdenCore VPN Security

Technical details of protection: encryption, protocols, No-Log, leak protection. Only verifiable claims.

Principle: we only publish security claims that can be technically verified. No absolute guarantees — only facts about the architecture.

Encryption

  • TLS 1.3 — all connections protected by modern TLS
  • AES-256 / ChaCha20 — symmetric data encryption
  • Dynamic keys — session keys rotate; past traffic cannot be decrypted if a key is compromised

Protocols

  • VLESS — minimal header, zero overhead, works over TLS
  • Hysteria2 — QUIC + built-in encryption and obfuscation, DPI-resistant
  • Reality — borrows a real domain's TLS certificate; traffic indistinguishable from HTTPS

No-Log policy

We do not record:
  • browsing history and DNS queries
  • IP addresses (source and destination)
  • session metadata
  • traffic content
Architecturally, servers have no capability to log user traffic.

Leak protection

  • Kill Switch — if the VPN connection drops, internet is blocked; traffic never goes direct
  • DNS leak protection — DNS queries go through the VPN tunnel
  • IPv6 filtering — prevents leaks via IPv6 when unsupported

Infrastructure

  • Servers in 6 countries, 1–10 Gbit/s links
  • Infrastructure access limited to a small circle of people
  • Regular configuration audits

What we do not guarantee

  • Full anonymity if the user's device is compromised
  • Protection against physical access to your device
  • Immunity to man-in-the-middle attacks at your ISP level when VPN is off