Every device, automatically
Phones, laptops, TVs, cameras, printers, guests.
Anything that joins the WiFi is routed, with no app and no per-seat login. The devices that cannot run a VPN on their own, like conference systems and printers, are finally covered too. One box protects the whole network.
China-direct split routing
Local stays local. Only what needs the tunnel takes it.
Domestic sites resolve and load directly, at full local speed, while international services are sent down the CN2 GIA premium lane. It runs on VLESS-Reality over sing-box, the same engine as our apps, so the tunnel looks like ordinary HTTPS and holds at peak hours.