How Moonshard works

Moonshard has three moving parts: the app on your device, a control plane that knows which exits are healthy, and the exit nodes themselves. The app never learns anything about the fleet it does not need, and the control plane never sees what you do through the tunnel.

Two transports, picked for you

Most VPNs run one protocol and hope the network allows it. Moonshard ships two, and the app chooses between them.

VLESS-Reality hides inside an ordinary TLS connection to a real, unrelated website. To anything watching the wire, the handshake is indistinguishable from you visiting that site — because the first part of it genuinely is.

AmneziaWG is WireGuard with its handshake reshaped. Stock WireGuard has a recognisable packet signature; AmneziaWG pads and varies it so the traffic stops announcing itself as a VPN.

Neither is universally better. Some networks pass one and drop the other, and which one works can change when you move between Wi-Fi and cellular. The app tries, measures, and re-picks — you never choose a protocol from a menu.

Split tunnelling by service

Turn the tunnel on for the things you want it for, and leave the rest direct. You pick from a curated catalogue of services rather than composing routing rules, and the choice survives reconnects, region changes and restarts.

On iOS this is per-service rather than per-app. That is not a shortcut: per-app VPN on iOS requires a device enrolled in mobile device management, which a consumer app cannot do and should not want to.

Nothing block-relevant is baked into the app

Server addresses, keys, ports, obfuscation parameters — all of it arrives at runtime and can be rotated centrally. When an exit is blocked we replace it and your app picks up the change on its next refresh. No app update, no waiting for review, nothing for you to do.

Guest keys

You can mint a key that works for an hour, an evening or a weekend, in a region you choose. It expires on its own. It borrows one of your five device slots while it is alive and hands it back when it ends, so lending access never means sharing your account.