Capabilities
What Torna supports
An honest map of every transport and provider Torna handles — and exactly how. We separate what the Torna app dials natively from what you can carry into any compatible client, so nothing here over-promises.
In the Torna app
Protocols the native client (our Rust core) dials on its own — no third-party app needed. This is what powers one-tap connect on Android, iOS, macOS and desktop.
Fast modern VPN tunnel. Fully implemented and end-to-end tested — the app’s default today.
TLS-camouflaged transport that mimics real sites. Real handshake landing soon; the moat against DPI.
QUIC-based, congestion-optimised for lossy links. Real auth + obfs in progress.
QUIC with UUID auth — low-latency UDP relay. Real handshake in progress.
“In progress” means the protocol is wired but its real handshake isn’t on the wire yet — we label it honestly rather than ship a placeholder that DPI can spot. WireGuard is fully live today.
Via any sing-box client
Tap “export” on any verified endpoint and Torna hands you a signed subscription. Drop it into Hiddify, sing-box, v2rayN, NekoBox — anything that speaks the standard. These all dial today.
Standard WireGuard config, ready for any client.
VLESS incl. REALITY camouflage — the most common modern seller protocol.
Full Hysteria2 with Salamander obfuscation and Brutal congestion control.
Full TUIC v5 over QUIC with UUID + password auth.
Parsed for inventory only — no sing-box outbound exists, so it can’t be dialed or verified.
Verification still applies before an endpoint can be exported — Torna never hands out an unverified server. OpenVPN is the one format we parse for inventory but can’t carry: no sing-box outbound exists for it.
Bring your own configs
Already have servers? Paste a share link, a subscription, or drop a config file. Torna parses and verifies them, then serves them back through the transports above — you don’t need a third-party app to use what you import.
Share links & subscriptions
Config files
Imported endpoints are inventory until they pass the verification gate. OpenVPN is parsed for its server details but can’t be dialed — no transport in Torna or sing-box carries it.
Bring your own servers
Managed seller mode: hand Torna a cloud API key and it provisions, hardens and verifies the server for you — or bring a server you already run. The orchestrator never operates the node for you beyond your authorisation.
European bare-metal & cloud — high bandwidth, low cost.
Global cloud compute with many regions.
European infrastructure with strong DDoS protection.
Developer-friendly droplets, worldwide.
Iranian provider — in-country supply for domestic ingress. Attribution risk is disclosed before connect.
Any VPS you already operate — register it directly over SSH.
Baked into every path
Guarantees that hold no matter which transport or provider you choose.
Every endpoint is reconciled across panel, prober and bond before it can carry a session. No unverified supply.
Free access uses anonymous credentials — sellers never learn your identity and sessions can’t be linked to issuance.
USDT (TRC20/BEP20/Polygon), BTC and USDC, with multisig custody and public proof-of-reserves.
A vantage mesh continuously probes reachability and DPI behaviour, feeding routing and reputation in real time.
Statuses reflect the live codebase, not a roadmap wish-list. As native protocols land their real handshakes, this page moves them from “In progress” to “Live”.