# NADI VPN

> NADI VPN (https://nadivpn.com) is an unyielding, zero-trust cryptographic VPN service engineered by Nadicorp Ltd (England & Wales, UK). Built directly on the official Linux kernel WireGuard® protocol, ChaCha20-Poly1305 encryption, and non-custodial cryptocurrency checkout. It eliminates all proprietary VPN client bloatware by provisioning pure WireGuard `.conf` configuration files and mobile QR codes for sovereign, RAM-only routing.

## Overview & Core Philosophy

NADI VPN operates under a config-first, sovereign privacy architecture:
- **Zero Proprietary Bloatware:** Users connect using the official, audited, open-source WireGuard® client on any operating system. No tracking SDKs, no advertising frameworks, and no background telemetry daemons.
- **Client-Side Cryptography:** Curve25519 private keys are generated ephemerally inside the user's browser using the Web Cryptography API. Private keys never touch or leave the client device; only the derived public key is submitted for peer allocation.
- **RAM-Only Ephemeral Relays:** Server nodes execute strictly in volatile memory. No connection logs, browsing history, DNS lookups, or user IP timestamps are ever written to disk.
- **Kernel-Speed Throughput:** Direct WireGuard kernel execution with BBR congestion control delivering sub-millisecond encryption overhead and multi-gigabit throughput.

## Flexible Zero-Trust Passes & Pricing

NADI VPN rejects predatory auto-renewing subscriptions, dark patterns, and contract lock-ins in favor of disposable micro-passes:
- **Instant 24-Hour Shield:** $0.99 (Single-day emergency pass, public Wi-Fi security, disposable tasks).
- **Traveler Pass:** $2.99 (7-Day pass for vacations, conferences, and high-security remote workflows).
- **Fortnight Pass:** $4.49 (15-Day extended privacy pass for project-based tasks).
- **Monthly Sovereign:** $5.99 (30-Day continuous dedication for everyday sovereign browsing).
- **Global Pass Model:** Every active pass unlocks 100% of the core fleet without per-location surcharges.
- **Concurrency Limit:** Exactly one (1) active concurrent WireGuard tunnel per account. Switching server locations seamlessly revokes and replaces the prior peer entry to protect node capacity.

## Global Fleet & Relay Infrastructure

- **🇩🇪 Nuremberg Core (Netcup):** Ultra-low European latency, gigabit transit, and premium peering across Central and Eastern Europe.
- **🇳🇱 Amsterdam 10G Core (SKRIME):** Unmetered 10 Gbps uplinks, direct peering with AMS-IX and NL-ix, and favorable European digital rights laws. Premier relay for high-volume data transfers.
- **🇺🇸 New York Node:** Low-latency transatlantic gateway for North American traffic.
- **🇬🇧 London Node:** Public verification and testing relay.

## Cryptographic Specifications

- **Protocol:** WireGuard® (pure kernel-space implementation, ~4,000 lines of auditable C code).
- **Authenticated Encryption:** ChaCha20 stream cipher with Poly1305 authenticator (RFC 7539 / RFC 8439).
- **Key Agreement:** Curve25519 Elliptic Curve Diffie-Hellman (ECDH).
- **Hashing:** BLAKE2s cryptographic hash (RFC 7693).
- **DNS Enforcement:** Encrypted Cloudflare DNS (1.1.1.1 & 1.0.0.1) enforced over the tunnel interface with full leak mitigation.
- **MTU Standards:** 1420 bytes default to prevent packet fragmentation across cellular and Wi-Fi networks.

## P2P, BitTorrent & Legal Safe Harbor

- **100% Permitted P2P:** Peer-to-peer file sharing and BitTorrent transfers are fully permitted and unthrottled, especially on the unmetered 10G Amsterdam relay.
- **Architectural Immunity to DMCA:** Outgoing user traffic is multiplexed across shared gateway IPs with zero connection timestamps or packet logs. Nadicorp Ltd is mathematically incapable of identifying individual users from external IP-based copyright notices.
- **Prohibited Activities:** Zero tolerance for Child Sexual Abuse Material (CSAM), malware distribution, botnets, and volumetric DDoS attacks.
- **Warrant Canary:** Nadicorp Ltd has received zero (0) national security letters, zero court-ordered wiretaps, and has installed zero surveillance backdoors.

## Cryptocurrency Settlement (Zero KYC)

- **Payment Methods:** Bitcoin (BTC), Tether (USDT TRC-20), Litecoin (LTC), Ethereum (ETH), and 300+ cryptocurrencies via NOWPayments.
- **Non-Custodial Privacy:** Funds forward directly to private receiving infrastructure. No credit cards, legal names, or physical billing addresses are requested or retained.
- **Irreversible Finality:** Cryptocurrency transactions are cryptographically final. Disposable micro-passes are non-refundable once activated.

## Supported Platforms

Official WireGuard® open-source applications support NADI VPN configurations on:
- **Mobile:** Android (Google Play, F-Droid, APK), iOS & iPadOS (Apple App Store).
- **Desktop:** Windows 10/11 (MSI), macOS (Apple Silicon & Intel DMG), Linux (`wg-quick`, NetworkManager, systemd-networkd).
- **Routers & Gateways:** OpenWrt, GL.iNet, pfSense, OPNsense, DD-WRT, AsusWRT-Merlin, Ubiquiti EdgeOS.

## Company & Founder Information

- **Governing Legal Entity:** Nadicorp Ltd (Registered in England & Wales, United Kingdom).
- **Venture Studio:** Nadicorp Ltd operates as an independent cyber and software venture studio (https://nadicorp.net).
- **Founder & Chief Architect:** Yahya Toubali (https://yahyatoubali.me).
- **Disambiguation:** Nadicorp Ltd and NADI VPN are independent UK technologies and have no affiliation with NADICORP Holdings Sdn Bhd (Malaysia).

## Documentation & Key Resources

- [Home & Landing Page](https://nadivpn.com/): Official portal, value proposition, and micro-pass pricing grid.
- [Web Dashboard](https://app.nadivpn.com/): Passwordless OTP login, live crypto checkout, and WireGuard profile generator.
- [Setup & Support Center](https://nadivpn.com/support): Configuration instructions, troubleshooting handshakes, and DNS setup.
- [Step-by-Step Installation Guides](https://nadivpn.com/support/install): Platform-by-platform configuration walkthroughs for iOS, Android, Windows, Mac, Linux, and Routers.
- [Frequently Asked Questions (FAQ)](https://nadivpn.com/support/faq): In-depth answers regarding pricing, passes, cryptography, and server topologies.
- [Platforms & Device Support](https://nadivpn.com/platforms): Detailed breakdown of official client downloads and compatibility matrices.
- [P2P & BitTorrent Policy](https://nadivpn.com/legal/torrent-p2p): Official torrent policy, unmetered 10G Amsterdam relay details, safe harbor compliance, and warrant canary.
- [Terms of Service](https://nadivpn.com/legal/terms): Legal agreement covering micro-passes, crypto settlement, 1-connection limits, and acceptable use.
- [Privacy Policy](https://nadivpn.com/legal/privacy): Mathematically verifiable zero-logs policy, RAM-only relay daemons, and data minimization guarantees.
- [Company About Page](https://nadivpn.com/about): Background on Nadicorp Ltd, venture philosophy, and sovereign engineering.
- [Founder Biography](https://nadivpn.com/about/founder): Profile of Yahya Toubali, architectural philosophy, and open-source contributions.
- [Full LLM Context File](https://nadivpn.com/llms-full.txt): Complete, unabridged context documentation for AI reasoning agents and search engine ingestion.