Ghostlane

Globvent inc.

About this app

Ghostlane carries your traffic inside a video call.

Most tunnels are recognisable. On a network that inspects what passes through it
and drops anything shaped like a VPN, they stop working — not because the
encryption failed, but because the shape of the connection gave it away.

olcRTC is a different answer. It opens a WebRTC media session to a public
meeting service — the same kind of call the network already carries all day —
and moves your traffic inside it. What stays on the wire is a video call.

ROOMS, AND HOW FULL THEY ARE

An olcRTC relay holds a fixed number of slots, and a full room cannot take you.
So the app asks each room how full it is and shows that in the list, before you
pick one. It is the sort of thing you only need when the thing you are
connecting to has rooms.

IT ALSO SPEAKS THE ORDINARY PROTOCOLS

A call-shaped tunnel costs bandwidth, and it is not needed until it is. The same
app connects over the standard transports too, and you move between them as the
network around you changes:

• VLESS with Reality
• VLESS over TLS, including through a CDN
• Hysteria2, with Salamander obfuscation
• XHTTP

One app, because the moment you need the fallback is the worst possible moment
to be installing another one.

BRINGING YOUR OWN SERVERS

Add a server list by pasting its link, scanning its QR code, or importing a
file. The app groups servers by where they came from, filters them by protocol,
remembers which exit you last used, and refreshes the list on a schedule you
choose.

Connecting routes the whole device through the exit you picked, using Apple's
own packet tunnel. The status screen shows how long the session has been up and
how much has gone through it.

MEASURING

Latency is measured where it can honestly be measured: through the tunnel for
the connection you are on, and by ICMP echo for a server you are not connected
to. Where neither is possible the app says so instead of showing a number it
guessed.

PRIVACY

Nothing is collected. No account, no analytics, no advertising identifier, no
crash reporting service. Your server lists and the app's own log stay on the
device and are never sent anywhere.

The app talks to exactly two kinds of address: the server-list URL you added,
and the VPN servers in it. The one exception is a partner link that has to be
resolved into a server-list URL, and that request carries the link and nothing
about you.

REQUIREMENTS

A server configuration from a VPN provider: a server-list URL, a QR code, or a
pasted link. The app does not sell one and does not include one. Any provider
that speaks the protocols above will work.

OPEN SOURCE

https://github.com/ghostlane-project/ghostlane

What’s new

• On a network that uses IPv6, connections to IPv6 addresses could go outside the tunnel while the VPN showed as connected. The tunnel now takes IPv6 as well, so everything goes through it.
• New in Settings › Connection: a kill switch, off by default. With it on, when the VPN is not up iOS holds your traffic instead of sending it directly, and brings the VPN back by itself. Please read the note under the switch before you turn it on.
• Server links that use the HTTP transport now connect.