VPN Glossary
Plain-language explanations of terms used in the SafeSurf guides.
VPN
An encrypted network tunnel between a compatible client and a VPN endpoint.
IP address
A network address. IPv4 uses four decimal groups; IPv6 uses hexadecimal groups separated by colons.
Protocol
Rules for a connection, such as WireGuard or OpenVPN. The client and provider configuration must match.
Encryption
Encoding data so it can be read by an authorised recipient with the appropriate key.
HTTPS
Encryption for the connection between a browser and a website. Continue to use it with a VPN.
TLS
The modern security protocol used by HTTPS. SSL is its obsolete predecessor.
Latency
The time a packet takes to travel; often discussed as round-trip delay or ping.
Bandwidth
The capacity of a network connection, distinct from the speed achieved by an individual transfer.
DNS
The system that resolves names such as safesurf.pro to network addresses.
DNS leak
DNS requests taking an unintended route outside the expected VPN configuration.
Kill switch
A client or system feature that can block traffic when the VPN is disconnected; behaviour varies.
Split tunnelling
Routing selected traffic outside or inside the VPN, depending on the configuration.
Dedicated IP
An IP assigned for a particular customer or use. It can help with allowlists but is not inherently more anonymous.
No-logs policy
A provider statement about categories of records it does not retain. Read its scope and supporting evidence.
Client
The application or device component that establishes a VPN connection.
Server
The remote endpoint that accepts the VPN connection and routes traffic.
Profile
Connection settings that may include credentials, certificates or private keys; keep it secure.