DESIGN §12 · defaults table
Presets at helm init,
not separate products.
The same binaries run for one operator and for a team of
thousands. The difference is one flag —
--personal or --enterprise — which
sets defaults. Every field is reconfigurable after first run.
| Setting | --personal | --enterprise |
|---|---|---|
| Regions | 1, nearest | operator picks |
| Idle nodes | none | encouraged, pre-positioned, stopped |
| Protocols | AmneziaWG default, XRay optional | both |
Relay (beacon) | embedded | embedded + remote relays |
| Account sync | on | optional (MDM-only deployments run none) |
| Admins | one (the operator) | core admin + UI-added others |
| Audit retention | 30 days | 1 year |
| Metrics retention | 7 days | 90 days |
| REALITY decoy site | www.microsoft.com | configurable, rotated |
| Engine | identical | identical |
| Licence | AGPL-3.0-or-later | AGPL-3.0-or-later |
| Source | same repos | same repos |
| Price | your cloud bill | your cloud bill |
why this matters
Most VPN brands ship two products.
A cheap personal tier and an expensive enterprise tier — sold side-by-side, but built from different codebases. The personal product is the marketing funnel; the enterprise product is the revenue.
PharosVPN is the inverse. One project, both audiences, no upsell path between them. We've chosen AGPL-3.0 so that anyone building a service on top of the platform is asked to contribute their changes back. That is the business model — code, not money.