VPN blocked? Why your VPN stopped working — and what still works
Your VPN worked yesterday. Today it hangs on "Connecting…", or connects and then nothing loads. You switch servers, reinstall, try another app — same thing.
In most cases nothing is wrong with your phone or your settings. Your network has learned to recognise VPN traffic and is cutting it off.
How networks detect a VPN
Internet providers in many countries use DPI — deep packet inspection. DPI doesn't need to read your data. It looks at the shape of the connection: which port it uses, how the first packets look, how big they are, how they're timed.
Popular VPN protocols have very recognisable shapes:
- OpenVPN starts every connection with a distinctive handshake. A DPI system can spot it within the first packets.
- WireGuard is fast and modern, but its handshake messages have fixed types and fixed sizes and run over UDP. That makes it one of the easiest protocols to fingerprint.
- IPsec / L2TP / IKEv2 use well-known ports and headers and are often blocked entirely.
- Shadowsocks and similar proxies were built to hide, but some networks now detect them by traffic statistics or by "probing" the server.
Once the protocol is recognised, the network can block it outright, reset the connection after a few seconds, or throttle it until it's unusable. That's why a VPN can show "Connected" and still load nothing.
Typical symptoms
- Stuck on "Connecting…" or "Handshake…"
- Connects, then drops after 5–30 seconds
- Connected, but websites don't open
- Works on Wi-Fi, fails on mobile data (or the other way round)
- Works at night, fails during the day or during protests and major events
If changing the server doesn't help but changing the network does, the protocol is being detected.
What actually helps
- Changing servers inside the same app rarely helps. If the protocol is detected, every server of that protocol is detected.
- Changing to a different protocol helps — but only if the new one doesn't look like a VPN.
- The traffic must look like something the network can't block. No provider can block ordinary HTTPS — it would break banking, shopping, and every normal website.
How Oxyn does it
Oxyn doesn't use OpenVPN or WireGuard. We built our own protocol, based on the Noise framework — the same cryptographic foundation used by WhatsApp and WireGuard itself.
- It runs over TCP port 443, the port every HTTPS website uses.
- From the outside, the connection is designed to look like ordinary HTTPS traffic, not like a VPN.
- There is no fixed VPN handshake for DPI to recognise.
On top of that:
- Native apps for Windows, Linux and Android. iPhone, iPad, Mac and Apple TV work through the Happ client with your Oxyn subscription link.
- Leak protection: DNS and IPv6 requests don't leak outside the tunnel.
- No VPN activity logs.
- Servers in five countries, all included in every plan.
No tool is unblockable forever, and we won't claim otherwise. But Oxyn is built specifically for networks where regular VPNs already fail.
Try it on your network — free
The only real test is your own connection. Oxyn gives you 15 days and 30 GB free — just an email, no card. Install, sign up in the app, tap connect.
FAQ
Is it a problem with my phone?
Usually not. If the same VPN works on another network (another Wi-Fi, another mobile operator), your network is blocking the protocol.
Why does my VPN say "Connected" but nothing loads?
The network let the handshake through, then started dropping or throttling the traffic after recognising it.
Will a different WireGuard or OpenVPN app work?
Usually not. The block is on the protocol, not on the app.
Can my provider see that I use Oxyn?
They see an encrypted connection on port 443, like any HTTPS site. Oxyn is designed so that it doesn't look like a VPN.
How can I pay if international cards don't work?
Card or crypto (USDT, BNB and others) — in the app or in your dashboard.