Reference · 7 min read

VPN and proxy glossary

Clear, honest definitions of the VPN and proxy terms you will meet across s4m and the wider industry. Bookmark this page as a quick reference while you set up a tunnel or route traffic through a proxy.

Proxy and VPN fundamentals

The building blocks — the servers and tunnels that sit between your device and the internet.

These terms describe the two main ways to route traffic away from your device so third parties never see your real address.

Proxy server
An intermediary server that receives your request, forwards it to the destination, and returns the response. To the destination the traffic looks like it came from the proxy, not from you, which is how a proxy helps hide your origin IP. See the s4m proxy product for authenticated endpoints.
Forward proxy
A proxy that sits in front of clients and represents them to the wider internet — the everyday meaning of "proxy". It contrasts with a reverse proxy, which sits in front of servers. The s4m SOCKS5 and HTTP proxies are forward proxies.
SOCKS5
A low-level proxy protocol that relays raw TCP (and UDP) traffic for any application, not just web browsers. It supports authentication and does not alter your data. Point a client at proxy.s4m.online:1080 with USER:PASS to use it.
HTTP(S) proxy
A proxy that understands the HTTP protocol and is typically used for web traffic. For HTTPS it tunnels the encrypted connection with the CONNECT method without reading its contents. The s4m HTTP proxy listens on proxy.s4m.online:3128.
VPN
A Virtual Private Network encrypts all traffic leaving your device and routes it through a remote server, so every app is covered at once — unlike a proxy, which is usually configured per app. Explore the s4m VPN for a flat monthly rate (not metered per-GB) on paid plans.
WireGuard
A modern VPN protocol built around a small, auditable codebase and fast, up-to-date cryptography. It connects quickly and roams well between networks, and it is the default protocol on the s4m VPN.
OpenVPN
A mature, widely supported VPN protocol that runs over TLS. It is highly configurable and can be more firewall-friendly on restrictive networks, at the cost of more overhead than WireGuard. s4m offers OpenVPN as an alternative.

IP types, privacy and anonymity

What the destination actually sees, and how private the connection really is.

Once traffic leaves through a proxy or VPN, these terms describe the address it appears to come from and how much a connection reveals about you.

No-logs
A design goal where the provider does not record which sites you visit or keep connection metadata that could tie activity back to you. s4m is no-logs by design with a RAM-first architecture, so operational state lives in memory rather than on disk.
Datacenter proxy
A proxy whose IP is hosted in a data center. These are stable and cost-effective, though networks can recognise the ranges as non-residential. All of the paid s4m proxies are authenticated datacenter SOCKS5 and HTTP proxies.
Residential proxy
A proxy that routes through IP addresses ISPs assign to home users, so traffic appears to come from an ordinary household. s4m does not sell residential proxies — our paid proxies are datacenter, and residential IPs would require a different kind of provider.
Dedicated / personal IP
A static IP reserved for you alone rather than shared with other users. It gives you a stable reputation for whitelisting and stays associated with your s4m account. As an s4m add-on it binds to either your VPN or your proxy — see pricing.
Anonymity levels (transparent / anonymous / elite)
A grading of how much a proxy reveals. Transparent proxies pass your real IP along in headers (no privacy). Anonymous proxies hide your IP but signal that a proxy is in use. Elite (high-anonymity) proxies hide your IP and do not advertise themselves. Filter the free proxy list by level.
DNS leak
When your DNS lookups bypass the tunnel and reach your ISP's resolver, exposing the domains you visit even though the rest of your traffic is proxied or encrypted. A correctly configured VPN routes DNS through the tunnel; you can confirm with any DNS-leak test.
Exit node / exit IP
The last hop before the public internet, and the IP address the destination actually sees. With s4m that is the shared datacenter proxy IP, your VPN server, or — if you add one — your dedicated IP. Your real origin IP stays hidden behind it.

Check your exit IP through a proxy

bash
# Route one request through your s4m SOCKS5 proxy (port 1080)
curl --socks5-hostname "USER:[email protected]:1080" https://api.ipify.org

# ...or through the HTTP proxy (port 3128)
curl -x "http://USER:[email protected]:3128" https://api.ipify.org

# The address printed back is your EXIT IP — the only IP the
# destination server sees. Your real origin IP stays hidden behind it.

Performance and access control

The operational terms that decide how fast, reliable and controllable a connection is.

Speed and reliability matter as much as privacy, especially for automation. These terms cover both, plus how access is limited.

Latency
The round-trip delay between your device and the destination, usually measured in milliseconds. Every extra hop — including a proxy or VPN server — adds some latency, so choosing an endpoint geographically close to your target keeps it low.
Uptime
The proportion of time a service stays available and reachable. It matters most for proxies used in automation, where a dead endpoint breaks jobs. The free public list shows recorded check results. The catalogue retains historical records, including entries marked as not working. A recorded success does not guarantee a connection now. Review the status and timestamp, then validate an endpoint before use.
IP whitelisting
Restricting a service so only approved IP addresses can connect. A dedicated IP makes this practical: you whitelist one stable address instead of a rotating pool, which is why teams often pair whitelisting with a personal IP.
Usage throttling
Deliberately capping transfer speed or volume. On s4m, admins can tune usage limits on three axes — per account-type, per IP and per account — while paid VPN plans offer a flat monthly rate (not metered per-GB).

Browse all terms

Every term with its own in-depth page — browse the full list page by page.

AES-256

AES-256 is a widely trusted symmetric cipher used to encrypt data in VPNs and TLS. Learn what the 256 means and where s4m relies on strong encryption.

Read →

ASN (Autonomous System Number)

An ASN identifies a network operator on the internet and reveals whether an IP is datacenter or residential. Learn why sites check the ASN of your IP.

Read →

Anonymous Proxy

An anonymous proxy hides your real IP but may still reveal that a proxy is in use. Learn how it compares to transparent and elite proxies.

Read →

Anti-Detect Browser

An anti-detect browser manages fingerprints so each profile looks like a distinct, consistent device. Learn what it controls and where a proxy fits.

Read →

Backconnect Proxy

A backconnect proxy gives you one gateway address that routes to a rotating pool of exits behind it. Learn how it simplifies using many IPs.

Read →

Bandwidth

Bandwidth is the maximum data-rate a connection can carry, measured in bits per second. See how it differs from throughput and where a proxy fits.

Read →

Browser Fingerprint

A browser fingerprint identifies you from device and browser attributes, no cookies needed. Learn what feeds it and how to reduce its uniqueness.

Read →

CAPTCHA

A CAPTCHA is a challenge that separates humans from bots, often triggered by suspicious IPs. Learn what sets it off and how to reduce the friction.

Read →

CGNAT (Carrier-Grade NAT)

CGNAT makes many ISP customers share one public IP, breaking inbound connections and port forwarding. Learn how it works and how a dedicated IP helps.

Read →

Canvas Fingerprint

Canvas fingerprinting identifies your device from tiny differences in how it renders graphics. Learn how it works and why it is hard to hide.

Read →

ChaCha20

ChaCha20 is a fast stream cipher used in modern VPNs and TLS, strong even without hardware AES support. Learn how it compares to AES-256 on speed and security.

Read →

DNS Leak

A DNS leak exposes the sites you visit when lookups bypass your tunnel. Learn how leaks happen, how to test for them, and how a VPN prevents them.

Read →

DNS over HTTPS (DoH)

DNS over HTTPS encrypts your domain lookups inside HTTPS so no one on the path can read or tamper with them. Learn how DoH improves privacy.

Read →

DNS over TLS (DoT)

DNS over TLS encrypts your DNS queries over a dedicated TLS port so no one on the network can read them. Learn how DoT works and how it compares to DoH.

Read →

Datacenter Proxy

A datacenter proxy routes traffic through a server in a hosting facility, offering speed and low cost. Learn its trade-offs and how s4m provides them.

Read →

Dedicated IP

A dedicated IP is exclusively assigned under service terms, without guarantees of a clean history, reputation or password-free access.

Read →

Deep Packet Inspection (DPI)

Deep packet inspection examines the contents of traffic to identify or block protocols like VPNs. Learn how it works and how obfuscation counters it.

Read →

Double VPN

A double VPN routes your traffic through two VPN servers in sequence for extra anonymity. Learn how it works and its speed trade-offs.

Read →

Elite Proxy

Elite proxy describes observed header behaviour, not guaranteed anonymity. Learn what a header test can verify and what it cannot.

Read →

Encrypted SNI (ESNI)

Encrypted SNI hides the hostname in a TLS handshake that would otherwise be sent in the clear. Learn how ESNI and its successor ECH close that leak.

Read →

Exit IP

Your exit IP is the address a website sees when you use a VPN or proxy, replacing your real one. Learn what it reveals and how to check it.

Read →

Exit Node

An exit node is the final server in a privacy chain, where your traffic re-enters the open internet. Learn its role and how it shows your exit IP.

Read →

Forward Proxy

A forward proxy sits in front of clients and fetches resources on their behalf, hiding their IP. Learn how it differs from a reverse proxy.

Read →

Fraud Score

A fraud score rates how risky an IP or visitor looks to anti-fraud systems. Learn which signals drive it and how proxy choice changes the result.

Read →
FAQ

Questions, answered

What's the difference between a datacenter and a residential proxy?

A datacenter proxy's IP is hosted in a data center — stable and affordable, but recognisable as non-residential. A residential proxy borrows IPs that ISPs assign to homes, so traffic looks like an ordinary user. s4m sells authenticated datacenter SOCKS5 and HTTP proxies, not residential ones.

Does using a VPN or proxy make me anonymous?

No tool makes you fully anonymous. A VPN or proxy hides your origin IP from the sites you reach and encrypts (VPN) or relays (proxy) your traffic, but logins, cookies and browser fingerprints can still identify you. s4m is no-logs by design to minimise what could ever be linked back to you.

Should I use the VPN or the proxy?

Use the VPN when you want every app on the device covered by one encrypted tunnel. Use a proxy when you only need to route specific apps or automation jobs, or want metered pay-as-you-go billing. Many users combine both — see the VPN and proxy pages for details.

What is a DNS leak and how do I check for one?

A DNS leak happens when domain lookups skip the tunnel and reach your ISP's resolver, revealing the sites you visit. While connected, run any DNS-leak test site; if it shows your ISP's resolver instead of the VPN's, your DNS is leaking and should be reconfigured to route through the tunnel.

Are the free public proxies safe to use?

Treat them as use-at-your-own-risk. s4m harvests them from open sources and continuously validates them, but they are third-party servers we do not control — great for testing, not for sensitive traffic. For that, use the authenticated paid proxies or the VPN.

Hide your origin IP with s4m

Put these terms to work: launch a WireGuard or OpenVPN tunnel, or connect authenticated SOCKS5/HTTP proxies. Anonymous accounts, metered proxy billing, and an optional dedicated IP.

People found this page by searching for

Real search phrases this page answers — the linked ones open the page that covers them in depth.