The conservative, battle-tested choice. The one that goes through almost anywhere.

OpenVPN has been around for two decades, audited many times over, and it's the protocol that travels best across legacy networks and corporate environments. We ship it with strong, modern defaults — not 2010 settings — and offer it over both UDP and TCP.

- Cipher: AES-256-GCM (AEAD), TLS 1.3 control channel

- Transport: UDP for speed, TCP/443 as a fallback that looks like HTTPS

- Clients: OpenVPN Connect and any OpenVPN-compatible app, on every platform

- Plays nicely with corporate proxies and captive portals

- Mature ecosystem — easy to debug, easy to integrate

Choose this if: you specifically need a TLS-style tunnel — for example to traverse an HTTPS-only proxy — or you're plugging into a network that only allows TCP/443 out.