Six layers working as one organism.
Classic VPNs pick one protocol and pray that it does not get blocked. CHIMERA is built differently: it is not a protocol, it is an echelon of six, plus models that decide which one is active right now.
Multi-protocol engine
Six built-in transports: WireGuard-TLS, V2Ray VLESS+XTLS, Shadowsocks 2022, OpenVPN+obfs4, HTTP/2 CDN tunnel, WebRTC DataChannel. Switching between them within a single TCP session — without breaking applications.
ML protocol selector
A compact model runs on the client (ONNX export, CPU inference). It observes current network signals — RTT, jitter, dropped-packet ratio, SNI patterns — and picks the protocol with the lowest detection probability for the current ISP. Retrained nightly on aggregated telemetry.
Steganography in WebRTC and CDN
Fallback layer: if every "classic" obfuscated transport is blocked, traffic moves over a WebRTC DataChannel (masquerading as a video call) or through an HTTP/2 CDN session (indistinguishable from a regular page load). This layer is our unique contribution; we are not aware of another VPN doing it in production.
Decentralised node network
Exit nodes do not know each other directly. DHT discovery, Raft consensus for coordination, a reputation system filters out compromised nodes. A single-node compromise never reveals the entire network — keys are per-node, geo-balancing is per-client.
DPI predictor
The app continuously learns which paths a network is blocking and automatically shifts to one that still gets through. A path that fails is demoted and retried later, so the connection keeps adapting to new restrictions without you doing anything.
No-logs architecture
Access logs are discarded. We keep only aggregated counters — no IP, no user-id. Billing stores nothing but a hash of your key and an expiry date. An independent audit is planned and will be published in full.
The questions people usually ask.
An external audit is planned and will be published in full when complete. The warrant canary refreshes monthly. The infrastructure runs on anonymous hosting providers, not AWS/GCP — there's nobody there to coerce.
You switch to another exit — we run independent exits in separate jurisdictions, and the app moves you to a working one. Each exit holds only its own keys; it cannot expose another exit, and it stores nothing that could identify you or where you went.
Cards and PayPal require KYC. Any fiat integration breaks the anonymity of the business model. Monero is the most private option, Lightning the fastest.
The core (chimera-core) will be opened as reproducible-build artifacts after the external audit. The full server-side source code stays closed — that's our competitive uniqueness.