AvarionX VPN

A privacy focused VPN client for Android, designed to provide secure connections, modern protocols, and a clean user experience without intrusive tracking or advertising.

Overview

AvarionX Secure VPN allows Android devices to connect to secure VPN servers using modern encrypted protocols.

The application is designed to be simple to use while still supporting advanced networking backends and transport methods.

Key features:

- Secure VPN tunneling - Multiple backend protocol options - Global server locations - Low overhead Android implementation - Clean UI with no intrusive tracking - Compatible with modern Android networking APIs

Protocols and Networking

The VPN client supports multiple transport backends. WireGuard

WireGuard is the primary protocol used for high performance encrypted tunneling.

It offers:

- Modern cryptography - Low overhead - Fast connection establishment - Efficient roaming support

Networking Components

This project integrates and builds upon several open-source networking tools.

External components referenced in this project include:

Hysteria

High performance proxy built on QUIC.

https://github.com/apernet/hysteria

Tun2Socks

A TUN interface to SOCKS bridge used for routing VPN traffic through proxy transports.

https://github.com/xjasonlyu/tun2socks

Amnezia WireGuard

An obfuscated variant of the WireGuard protocol designed to resist traffic identification.

https://github.com/amnezia-vpn/amneziawg

These projects remain the property of their respective authors.

Privacy

Private policy The VPN client is designed with a minimal data collection philosophy.

- Strict No Activity Logs policy. Encrypted traffic content is never inspected or logged. - No ads, analytics, or tracking libraries are included in the application.

The architecture

Colourswift Core

Authentication, account policy enforcement etc, are handled by ColourSwift Core, which runs on Cloudflare infrastructure.

How does it work?

The client generates a device identifier, this is a random value for anonymous users or an account-linked identifier when signed in.

When connecting, the client sends this identifier to ColourSwift Core to request connection details for a selected region. The backend responds with temporary session data and server configuration.

The client then establishes a direct connection to the VPN server using this information.

ColourSwift Core is responsible for authentication and server assignment. It does not proxy, inspect, or handle user traffic.

CoreDNS

DNS services are handled by a DNS worker on Cloudflare, controlled by Colourswift Core.

How does it work?

In full VPN mode, DNS requests are handled by the VPN server. In DNS-only mode, the client communicates directly with the DNS service over HTTPS. Requests are processed by a Cloudflare Worker and filtered based on the user’s plan and settings.

License

Mozilla Public License Version 2.0