How TwoHop works
This page contains details for experienced users: connection modes, routing logic, the two-server layout, and the access key format. The home page is kept simple and easy to understand.
How it works
In the double-route mode, the first server knows the entry point and the second server knows the exit point. This helps split connection information between different nodes.
Routing
If the user is in Russia / CIS
- Banks, government services, and important Russian services open directly.
- Russian websites go through the Russian server when the route requires it.
- Foreign websites go through a chain of two servers.
If the user is abroad
- Russian websites go through the Russian server.
- Foreign websites go through the international server.
- User exclusions can open directly.
Client modes
Simple mode
Works without administrator privileges. The app configures the Windows system proxy and starts local proxies 127.0.0.1:19080 and 127.0.0.1:19081.
Full mode
Uses a TUN adapter and tun2socks to route all device traffic through TwoHop. Requires administrator launch.
Access keys
The key uses the twohop://... format and contains connection parameters, validity period, plan type, and server configuration. One key is intended for one active connection at a time.
The website issues a key after trial registration or payment confirmation, shows it on the page, and sends it by email or Telegram.
Operations
Website
- Registration: email, Google, Telegram.
- Trial key: 3 days after confirmation.
- Paid keys: 7 days, 1 month, 12 months.
- Expiration reminder is sent one day before the end.
Servers
- The control plane issues keys and sends them to relay servers.
- The relay checks key validity and the one-active-connection limit.
- Key revocation is sent to the servers after a refund or manual revocation.