ARMT SECURITY
GLOSSARY

Glossary of terms

Plain-language definitions of the terms that show up in our service descriptions — no marketing exaggeration.

VPS / VDS

A virtual private server — part of a physical machine that behaves like a standalone server: its own IP, its own OS, full SSH access. Cheaper than renting a whole physical server, and enough for most tasks, from a website to a VPN.

Hardening

Strengthening a server's security: closing unnecessary ports, disabling password login in favor of SSH keys, configuring a firewall, keeping software up to date. Not one action, but a set of measures that reduce the attack surface.

WireGuard

A modern VPN protocol with a small codebase (which makes independent security audits easier). Fast and simple to set up, but the fact that you're using a VPN on this protocol is relatively easy to detect from the outside — it doesn't disguise its traffic.

Xray

A platform for proxying and tunneling traffic with flexible support for different transports and protocols. Not a protocol itself, but a toolkit that more specialized solutions like VLESS are built on.

VLESS Reality

A protocol built on Xray that disguises a VPN connection as ordinary HTTPS traffic to a real, existing website. Significantly harder to detect and block by DPI signatures than classic protocols.

AmneziaWG

A fork of WireGuard with added traffic obfuscation — keeps the speed and simplicity of the original protocol, while making it harder for deep packet inspection (DPI) systems to recognize.

DPI (Deep Packet Inspection)

A technology for analyzing the content of network packets, not just their headers — used by ISPs and state systems to identify the type of traffic (including VPN) and subsequently block or throttle it.

Reverse proxy

An intermediary server (like Nginx or Caddy) that accepts incoming requests and forwards them to the right internal service — used for SSL termination, load balancing, and hiding a server's internal structure.

Firewall

A network barrier — rules defining what traffic is allowed onto a server and what's blocked. A basic but critical part of hardening: it closes ports that shouldn't be reachable from outside.