One of the features not many Internet users know about is the obfuscated VPN specialty servers. Such special servers take VPNs out of the ordinary and place this technology on top of any list of technologies and solutions meant at helping users circumvent restrictions, bypass VPN blocking, firewalls, and avoid internet censorship.

Stay with me if you’re thirsty for tech and curious about finding out everything you need to know about what is an obfuscated VPN server and why you need to use an obfuscated VPN server for secured, fast, private and easy web surfing.

The Transylvanian explanation of what is an obfuscated VPN server

We all love Halloween and the way it makes us creative when it comes to the costumes that we wear. One of the biggest Halloween fans you will ever meet is TomBat. Why? Because he always dreamed about being a superhero and this event always gave him the perfect occasion to transform into one. The only problems with the Halloween parties organized in Castlevania were the late hour and the threats lurking at the corners. These are the main reasons why TomBat’s parents never agreed for their little BATby to leave the cave.

Helped by his creative spirit, TomBat was always able to identify a way to leave the cave and bypass his parents’ restrictions.

One of the best examples of how he tricked his parents into thinking that he is leaving the cave to spend the night with a friend was when he hid his superhero costume under a huge raincoat and left to his friend, not to spend the night over but to meet him and go to the party.

This is what happens when you connect to an obfuscated server. If you use a VPN, you are already a superhero. Yet, some firewalls can intercept your traffic, and be aware that you are using a VPN. In such a case, your access gets blocked, and you are not able to unblock the resources that you want. When you use an obfuscated server, you camouflage your superhero costume under a raincoat, so firewalls and ISP won’t be aware that you are using a privacy tool.

What is VPN obfuscation?

Obfuscation is a common term used in programming and software engineering. This technique is used mainly to hide certain values, exact code lines, and their logic. Therefore, obfuscation helps obscure and distort certain messages, to ensure data security, in the first place, and online freedom.

Translating this into the VPN language, we can almost guess what this technique is used for. Since this blog is not a place for guessing, let’s discuss this topic properly, shall we?

What is an obfuscated VPN server and how do they work?

Obfuscated VPN servers are like the unicorn of VPN servers. An obfuscated VPN server will make the traffic generated through VPN appear like regular web traffic (HTTPS). 

The “disguise” process is not as simple as you might think, as when you use a VPN connection, the OpenVPN encrypted data contains two parts that are visible as data generated via VPN traffic:

1. The first part is the header that includes the routing information and the packet identification.
2. The second part is the Payload representing the data that the VPN server forwarded to the web address you want to access.

So, now the magic kicks in. 

To remove all the information indicating OpenVPN traffic/VPN encryption from the header, an obfuscated VPN server disguises the data and makes it look like regular HTTPS traffic. The most convenient way is the one when the OpenVPN packet is double encrypted using the SSL or TLS protocol. This process is like encrypting traffic that is already encrypted, to make it undetectable by firewalls and DPI (deep packet inspection).

Why should I connect to an obfuscated VPN server?

If you can access popular websites like YouTube, Facebook, or streaming services like Netflix or BBC iPlayer, you must know that you’re a lucky internet user. There are people located in certain countries worldwide where accessing popular online content is limited and, even worse, it’s completely banned, so bypassing restrictions is mandatory.

VPN can help users facing censorship bypass restrictions and gain access to the websites of their choice. The only problem is that some of these websites use specialized algorithms that can track, detect, and block VPN traffic. In this case, a VPN becomes useless unless it uses special power-ups to trick websites into seeing the traffic as normal HTTPS traffic.

Alongside advanced options like Shadowsocks, there are complimentary VPN features to help users surf freely. Obfuscated VPN servers can easily be included in this category. Due to their advanced encryption method, users can easily bypass internet restrictions, government censorship, the Great Firewall of China, and network firewalls. 

Therefore, the main reason why you would want to focus on using obfuscated VPN servers is to regain the much-deserved online freedom and get access to any website with just a click. 

How can firewalls or the ISP tell that you use VPN?

Internet service providers and the detection algorithms used by firewalls can identify that you’re using a VPN only by looking at the traffic. Since VPN uses advanced techniques to encrypt your traffic, your data is not visible in plain text, so your traffic pattern looks very different than the regular HTTPS one. 

Therefore, the prying eyes spying on your traffic can detect that you use a VPN, but your identity and data are a complete mystery.

Obfuscated VPN server vs regular VPN server

The VPN server is one of the three main components of a VPN, alongside the VPN protocol and the VPN encryption. The VPN server works like a bridge between your device and the internet, being a combo of hardware and software technologies.

When you enable a VPN connection, you automatically connect to the VPN server, which changes your IP address and encrypts your traffic. Due to these two capabilities of a VPN server, you can surf privately and anonymously, gaining access to blocked content.

Remember that I said that VPN usage could be detected and blocked? In this case, the VPN server needs the obfuscation power-up.

Therefore, an obfuscated VPN server is an improved version of a regular VPN server, which uses obfuscation in order to encrypt the data packets using additional SSL/SSH encryption. So, it applies a second layer of encryption to hide the data and prevent trackers from identifying that you are using a VPN.

Obfuscated VPN server vs double VPN server

While describing how obfuscated VPN servers work, I mentioned that the main step to trick websites into seeing your traffic like HTTPS one, this type of server uses a second layer of encryption. As I don’t want you to confuse obfuscated servers with double VPN ones, I thought that it might be a good idea to tell you a few things about double VPN as well. 

Double VPN is a type of VPN developed to allow VPN users to enhance their level of encryption while going online. The technology behind this advanced security solution allows users to browse anonymously and securely by connecting to a chain of VPN servers.

In super easy terms, we can say that when you connect to a double VPN server, it’s like adding a VPN on top of another VPN or is like creating a VPN tunnel inside another VPN tunnel. 

Besides the military-grade encryption that a regular VPN server provides, a double VPN server will enhance your internet anonymity and cybersecurity by cascading your VPN server. When using this kind of solution, you can chain more than two VPN servers in one connection. The result is a highly secure connection. Even so, cascading more than two VPN servers would definitely affect your internet speed and VPN performance. 

So, even if both solutions use two (or more, in case of a multiple VPN cascading) layers of encryption, the mechanism behind the process is different therefore, the result is different. Obfuscated VPN uses the second layer of encryption to secure your connection, hide the metadata, and disguise your VPN traffic, while double VPN uses double encryption to enhance your security but, your VPN traffic remains detectable in front of firewalls and advanced tracking algorithms. 

Other options to enjoy the perks of an obfuscated VPN 

Stealth VPN not only guarantees your online freedom but also assures your security based on its encryption level.

Online privacy and freedom are not only necessities but are also your RIGHTS. Would you allow your neighbor to read your emails? No? Then why would you let your ISP? 

The word “Stealth” is a popular term used to describe the Airforce planes. Stealth planes’ design and features allow them to overfly any area because radars can’t detect them.

Stealth VPN is a protocol that uses obfuscation to allow a user to bypass any restriction he might face while browsing the internet.

The best obfuscated VPN

Obfuscation is all about disguising VPN traffic and helping internet users browse freely, securely, anonymously, and avoid throttling. To accomplish all of these requires using a performant service. When it comes to providing obfuscated VPN servers, there are a handful of VPN providers known for their top-notch services, lite apps (for the most popular OSes, like Windows, Android, iOS, Mac, and even Linux), and complex and complete lists of features including the most-wanted KillSwitch, Smart DNS, proxy, split tunneling, or specialty servers (gaming, double VPN, or P2P servers). 

My main three picks of best VPNs that provide obfuscated VPN servers are:

ExpressVPN

I must agree with what the provider states on the website, ExpressVPN is the VPN that just works. With a list of fine VPN apps, a huge global network, advanced VPN features, and even their own VPN protocol (Lightway), ExpressVPN provides obfuscated VPN servers as well. 

So, if you look for the proper way to surf securely and trick websites into thinking that your internet traffic is an eligible one, ExpressVPN is clearly one of the best solutions you could try!

NordVPN

The second on the list is another popular VPN service. NordVPN is on every VPN user’s lips due to its impressive capabilities, lite apps, and care to bring innovation through every implemented solution. 

As expected, NordVPN provides obfuscated VPN servers in plenty of VPN locations around the globe that are waiting to be tested.

Surfshark

Surfshark humanizes digital security to make it accessible to all, being an excellent VPN service, providing a lot of strong security features that the average VPNs won’t offer, it’s fast and super user-friendly, eating other VPNs alive. And, since it’s on this list, besides the fact that it offers lots of options you can choose between, it also provides obfuscated VPN servers. So, feel free to give it a try and test its performance by yourself!

Final thoughts.

Before closing the book on the obfuscated VPN servers topic, I feel the need to do a bit of recap.

An obfuscated VPN server is one of the best options to consider if you look to avoid internet censorship and firewalls while keeping your data secured and a low profile. This advanced VPN solution was developed to grant Internet users all around the world access to blocked websites and media content.

The great news is that this solution is tested by VPN providers, and it has been proved to work even for users located in countries like Iran, China, Russia, Turkey, or Egypt.

Therefore, if you strive for online freedom at your fingertips, obfuscated VPN servers are the right solution for you. And, if you strive to learn as many things as possible about VPNs, the right thing to do is to subscribe to my newsletter by using the form below. It takes less than 10 seconds, and it makes the Transylvanian baby bats happy!

IKEv2 is one of the most popular VPN protocols due to its stability, speed, and security. Expanding upon the strengths of its predecessor (IKEv1), IKEv2 is nowadays a strong and reliable choice when it comes to encrypting data.

As you probably know already, it is fundamentally important to secure your data when connected to the Internet, and it is equally important to use the right tools. When it comes to VPN, the communication protocol is the foundation stone of online security. If the VPN protocol implements strong encryption algorithms and high-level security policies, you may use it with confidence. IKEv2 is, from the public knowledge available at this time, a VPN protocol that you may trust.

This article explains what IKEv2 is, how this VPN protocol works, how to set IKEv2 up on your devices, and how it compares with other VPN protocols. We will also look at some of the advantages and disadvantages of the IKEv2 protocol.

What is IKEv2? The Transylvanian story.

Bats know, probably better than humans, that they need to exercise regularly to be in shape. Unfortunately, the bats from Castlevania know this all too well as they have to face (more precisely, have to run fast from) the Megabats, their unfriendly neighbors.

One early morning TomBat and AnonymousBat, the two bat friends, took their bikes and headed towards the woods surrounding Vlad’s castle. As you can imagine, cycling is not a popular sport among bats, but TomBat and AnonymousBat have joined Vlad in his cycling rounds, and they started to like pedaling.

After an hour of intensive and joyful pedaling in the middle of the forest, TomBat had to stop. Something was wrong. Indeed, it was: his bike had a flat tire. TomBat had a moment of panic when he remembered that he had forgotten his repairing kit at home. The situation didn’t look joyful anymore. The perspective of getting back on foot (so to speak) was not pleasant.

Fortunately, TomBat was not alone and AnonymousBat had his own repairing kit. In ten minutes they were back on the road.

Not long after, it was TomBat’s turn to return the favor to AnonymousBat. When they felt a little bit exhausted, TomBat pulled out a chocolate bar from his backpack. It was the best chocolate you may find in Castlevania, made by TomBat girlfriend, PonyBat. With renewed forces, they were able to get back safely and happy.

The moral of the story: don’t go into the woods alone; a friend may help when you need it, and, together, you are both safer.

IKEv2 and IPSec are two good friends that help each other and work together to make VPN communication great. So let’s find out more about the IKEv2/IPSec VPN protocol.

What is IKEv2, and how does IKEv2 work?

IKEv2 (Internet Key Exchange version 2), the successor of IKEv1, is a VPN protocol developed by Microsoft and Cisco that uses the authentication suite IPSec to secure communication between a VPN client and a VPN server. Sometimes it is called IKEv2/IPSec.

IKEv2/IPSec generates encryption keys, providing high-level data security. For those interested in more technical details, IKEv2/IPSec uses the AES-256-GCM cipher for encryption. Additionally, it has several important advantages over other VPN protocols (explained in detail below).

The IKEv2/IPSec protocol uses the Diffie-Hellman key exchange algorithm to secure the communication tunnel. IKEv2 establishes a security association (SA) to check that the VPN client (your device) and the VPN server use the same encryption keys and algorithms. Once the security association is validated, IPSec creates the tunnel and initiates the secure communication.

Other important IKEv2 technical details:

• The IKEv2 uses UDP packets and port 500.
• It supports Perfect Forward Secrecy (PFS).
• IKE builds upon the Oakley Key Determination Protocol and ISAKMP for defining data exchange methods.
• IKE uses X.509 certificates for the authentication process.
• Open-source implementation exists, such as strongSwan, OpenIKEv2, and Openswan.

Why IKEv2 & IPSec?

IKEv2 and IPSec are different technologies that work great when combined.

IPSec (Internet Protocol Security) is a network protocol suite that provides secure tunneling between devices over an Internet Protocol network. It is used for encrypting data in virtual private networks (VPNs).

IPSec can use various mechanisms for authentication and key exchange to create security associations. One of these mechanisms is the Internet Key Exchange (IKE and IKEv2).

As IPSec is secure and reliable. IKEv2 is fast, stable, and provides rapid re-connection in case of dropouts. IKEv2/IPSec expose the best of both into a great VPN protocol.

IKEv1 vs. IKEv2 – The main differences

IKEv2 is the upgraded version of IKEv1 and this translates into faster, safer, and more efficient communication:

• IKEv2 consumes less bandwidth than IKEv1.
• IKEv2 has built-in NAT traversal (IKEv1 doesn’t).
• IKEv2 supports MOBIKE (Mobility and Multi-homing Protocol) make it more stable.
• IKEv2 supports EAP (Extensible Authentication Protocol) authentication, for safer communication.
• IKEv2 can detect whether a tunnel is still alive and it has the Keep Alive option enabled by default.
• As IKEv2 uses a lower number of Security Associations (SA) required per tunnel, it reduces the required bandwidth.
• IKEv2 supports Asymmetric authentication.

Thus, you should choose IKEv2 over IKEv1 any time you can.

IKEv2 compatibility

The IKEv2 was adopted and can be set up on all major operating systems (including Windows, macOS, iOS, Android, Linux) and various devices (routers, SmartTVs).

Due to its security features and stability, many VPN providers (e.g., NordVPN) use IKEv2 as the default protocol in their apps.

Advantages and disadvantages of IKEv2

Before setting up an IKEv2 VPN connection, you should take a minute and read about this VPN protocol’s pros and cons.

Advantages of using IKEv2

IKEv2 has some important benefits:

• It is secure as it supports multiple high-end ciphers for maximum protection.
• It is fast, despite implementing strong encryption.
• It is stable, as it allows users to switch between connections without dropping the protection. The efficient auto-reconnect feature is one of the most important features of IKEv2.
• It is supported on a wide variety of devices.

Disadvantages of using IKEv2

There is not much negative to say about IKEv2. One common complaint is that IKEv2 traffic can be easily blocked by firewalls, as it runs only on port 500 on UDP.

How to set up IKEv2 on your devices

Several options are available when it comes to setting IKEv2 on your device. The simplest is to install a VPN app that support the IKEv2 protocol, but, if you need to connect to your own VPN server, then you should go for the manual setup.

Additionally, you may set up IKEv2 on a router (some routers offer access to the IKEv2 protocol) and connect the devices you need to get the traffic encrypted directly to the router.

Manual IKEv2 setup

IKEv2 is one of the standard VPN protocols that can be set up on most operating systems from the VPN built-in modules. More precisely, you may set up IKEv2 (as well as L2TP or IPSec) without installing any additional app.

Firstly, you need to know the IKEv2 server name or IP address and the username/password for authentication (you may also use a certificate or use no authentication). You may obtain this info either from a VPN service provider or from the VPN network administrator. The third option is to have your own VPN server to connect to.

The manual IKEv2 setup consists of creating a VPN connection on your operating system of choice and filling in the connection settings. For example, on macOS you should perform the following steps:

1. Open System Preferences and click on the Network.
2. Click on the “+” button from the left side of the window to Create a new service.
3. For the Interface, select VPN.
4. Further, choose IKEv2 as the VPN Type.
5. Enter the connection name and click on the Create button.
6. Start the VPN configuration: enter the VPN server address (name or IP) to both the Server Address textbox and to the Remote ID field. You may let the Local ID textbox empty.
7. Next, click the Authentication Settings … button.
8. You may choose the authentication method (Username, Certificate, or None). For Username fill in the username and password. For the Certificate choose a machine authentication certificate that is already installed on your machine.
9. Finally, click the Apply button and then Connect.

Use VPN client apps

As IKEv2 is a fast and secure protocol, many VPN providers use it in their own apps, besides OpenVPN (TCP or UDP), WireGuard, or L2TP. Some even recommend IKEv2 as the default, automatic protocol, as is the case with Surfshark. Another great VPN service that we recommend and that uses IKEv2 in its apps is NordVPN.

IKEv2 on routers

Unfortunately, IKEv2 is not largely supported by routers, unlike PPTP or L2TP. However, support for IKEv2 Wi-Fi routers is expanding as some VPN providers invest in such solutions. A great example is ExpressVPN and the routers they offer.

Do you need more info on how to use a VPN on a router? Take a look at our comprehensive article!

IKEv2 alternative protocols

IKEv2 is one of the strongest VPN protocols that you may use to encrypt your online communication. However, you should know what are the differences between IKEv2 and other VPN protocols.

OpenVPN

OpenVPN is probably the most popular VPN protocol due to its over features and performance. It offers excellent encryption options, great speed, and it can be easily integrated into third-party security solutions. Plus, it is open-source, unlike IKEv2.

IKEv2 offers a similar level of protection and encryption, but it surpasses OpenVPN on the followings:

• High-speed throughput.
• Stability.
• Auto-reconnection.

IKEv2 is usually faster than OpenVPN, but it is a little bit behind in terms of compatibility.

Overall, you may use both IKEv2 and OpenVPN with confidence.

WireGuard

WireGuard is a new and elegant protocol that seems to be the future of VPN. It is open-source, secure, and easy to use.

Both protocols (IKEv2 and Wireguard) are safe and really fast, but if you want a more modern approach, you should go with Wireguard.

L2TP/IPSec (Layer 2 Tunneling Protocol)

As L2TP/IPSec offers acceptable speed and great encryption, it may be a good option for encrypting your VPN channels. L2TP is paired with IPSec in the same manner IKEv2 and IPSec work together. However, there are signs that L2TP/IPSec is no longer secure, as Snowden has claimed that the NSA has hacked it.

IKEv2/IPSec is faster than L2TP/IPSec since L2TP/IPSec is more resource-intensive due to its double encapsulation feature and takes longer to negotiate a VPN tunnel.

Another aspect in favor of IKEv2 is stability. Switching from one network to another is a smooth process with IKEv2, while L2TP may let you disconnected.

Softether

It is difficult to compare IKEv2 and Softether, as the latter is more than a VPN protocol. However, if we refer only to the protocol itself, Softether and IKEv2 are both secure.

Softether has some important advantages as it is open-source and it runs on port 443 (HTTPS), and, consequently, it is more difficult to be blocked.

SSTP (Secure Socket Tunneling Protocol)

SSTP is a secure VPN protocol mostly available on Windows devices. It uses SSL 3.0, and it is quite speedy.

SSTP and IKEv2 offer a similar level of encryption, but SSTP is more firewall resistant as it uses port 443. SSTP is only built-in on Windows operating system, unlike IKEv2 that is available on multiple platforms and devices (iOS, Android, macOS, Linux, etc.).

PPTP

PPTP is an outdated protocol and you should not use it unless you have no other choice available. It has multiple security-related issues. However, it is really fast. But, you should always go for IKEv2 if you have to choose between these two.

What is IKEv2? Summary.

The IKEv2 VPN is a strong, secure, stable, and fast VPN protocol. IKEv2 has no significant downsides, and you may use it confidently anytime you need to encrypt your online communication.

As explained, IKEv2 is easy to set up, and it is available on VPN apps offered by most VPN providers. And, it is very suitable for usage on mobile devices due to its stability when switching networks.

Do you want to learn more about the IKEv2 Protocol and other VPN-related issues? Subscribe to our newsletter (below). You will make a Transylvanian baby-bat very happy.

Online privacy, security, and anonymity are three principles on the verge of becoming legends. Yes, just like the legends you might have read about in storybooks. VPN technology comes like a knight in shiny armor to save your online activities from becoming a target for hackers and marketers and to ensure you with the much-deserved online anonymity. 

Even in 2021, many internet users associate VPN with a solution mainly used by tech gurus when, in reality, a VPN is so easy to use that even dummies can deal with it. And, don’t get me wrong, when I say dummy, I don’t mean to offend anyone but let’s be honest, everyone has that friend who is completely left-handed and artless when it comes to technology. 

This article is supposed to enlighten all the internet users who are a novice in online privacy solutions and make-justice to the VPN, that is literally the easiest to use tool EVER.

So, let’s roll up our sleeves and and check this beginner’s guide! 

The Transylvanian explanation of VPN for dummies

Since TomBat was a little BATby, GrandMaBat used to spoil him in all of the ways possible. His favorite grandpa-nephew moment was when GrandMaBat laid in the bed next to him, reading him adventure bedtime stories. By far, his bedtime story of choice was “A bat’s day out”, a tale presenting a young bat’s adventures in an enchanted forest. 

ObeBAT was the name of the little bat who decided to enter a mystic forest in search of adventure, dragons, dwarfs, elves, fairies, and other creatures.

From the outside, the forest looked normal, but the magic happened as soon as the visitor stepped in. To enter it, there was a special opening inviting you inside. After you set your foot in, you could see the whole ground covered with the greener grass, the rocks shining underneath the fuzzy, soft, green moss, and the sound made by the trees was the most beautiful song you have ever heard. The flowers are as big as a car wheel, and the giant bees are flying around, creating an exciting bustle.

As beautiful as it was, the enchanted forest was a “hotspot” for unpredictable things and dangerous creatures.

ObeBAT started wandering around the trees, flying around the colorful flowers and huge mushrooms, quenching his thirst with the clearest dew, without realizing that he is adventuring in the heart of the forest where the day is filled with terrors. 

Here, the winds were cold, the flowers were wilted, and the sound made by the trees was frightening. While looking for a way to return, he started to feel like prying eyes were spying on him, watching his every move. He desperately started to bat around the threes looking for an escape, but it felt like there was no hope left for him. When, in the distance, he could finally see a way out. It was more like a shining tunnel he could enter, but what was at the end of it, it was a total mystery. 

ObeBat decided to fly to the tunnel and enter it, in search of his way home.

Said and done! When he entered the tunnel, a powerful light spoiled his face, and a group of fairies guided him through this trackless tunnel so no dangerous creature could follow him back home. 

This magical tunnel acts exactly like the one created by a VPN for your data to safely and tracklessly travel between your device and the internet without the prying eyes of your ISP and hackers spying on it.

What is the definition of a VPN, and what is it all about with this technology?

Virtual Private Network or, in short terms, VPN is a security technology meant for protecting and encrypting one’s connection. A VPN creates a secured and private VPN tunnel between two devices, allowing users to securely and privately surf the web, granting private internet access anywhere, anytime. 

A VPN for dummies definition would sound as follows – A VPN is like a train tunnel. Why? Because when the train is in the tunnel, no one can see it. And this is what happens to your data. When the VPN is enabled on your device, your data gets encrypted, and the prying eyes of hackers or your ISP can’t spy on your activities.

So, we can easily say that the VPN is a:

Virtual technology – as you enable a virtual encrypted tunnel for your data to be securely transferred over the web.

Private technology – as it uses encryption, so all your activities are kept private and hidden from curious eyes.

Network – using a VPN might sound like it is not a big deal when, in fact, every time you connect to a VPN server, you get access to an entire servers network covering the whole world.

Why do I need a VPN, and what does a VPN do?

It is kind of dumb to ask why you need a VPN, especially if you know what a VPN does and what its perks are. 

Yet, if you’re a beginner, these two questions are 100% legit, and providing you with a proper answer may take longer than you expect. However, I will do my best to keep it short while presenting you all the important aspects you must know about this technology.

Why should I consider using a VPN?

The main reason why you would want to use a VPN is to prevent your ISP from tracking your online activity. It is no news that your ISP (and even hackers) can see in plain text what websites you visit whenever you visit them. Browsing incognito doesn’t mean you browse privately. Incognito browsing will help you surf privately with your family members, as your activity is not saved in your web browser’s history. Incognito does not offer you any privacy or security in relation to your ISP or other online prying eyes. 

On the other hand, cybercrime should be another serious reason why you should consider using a VPN. Along with the Internet’s expansion and more people having internet access, the number of online-related dangers is increasing rapidly therefore, adopting a responsible attitude towards your online identity and activities should be mandatory.

Besides the VPN users who are deeply preoccupied with their online security and privacy, we have internet users who seek online freedom. In the era of technology, for some people, the Internet is not the information superhighway, but more like a pothole country road due to online censorship. For this user category, the VPN is the key that opens the door to online freedom, information, social media, or streaming websites.

Just like VPNs, remote working is gaining more and more popularity. For both employees and companies, VPNs are important tools to ensure work productivity and secure access to a company’s network and resources, with just a click, from the comfort of a sofa, a coffee shop, or from a sunny beach in Tulum. 

What does a VPN do?

Besides the pinch of magic it adds to your connection, the VPN is also capable of accomplishing the following tasks:

• It hides your online activities and IP address. As already mentioned, the VPN uses encryption to disguise your online activities and is also capable of hiding your IP, allowing you to browse securely, freely, and anonymously.
• A VPN changes your IP address. Remember that when you enable the VPN, you are connected to a VPN server? The VPN server has an IP address you are assigned with, as soon as you are successfully connected to the server. 
• Performant VPNs help you unblock websites. Based on its capability of changing your IP address, a VPN can help you forget about bandwidth throttling and unblock geo-restricted websites like BBC iPlayer, Netflix, or, from countries like China or Egypt, websites like Facebook or VoIP services like Skype. An important thing to mention is that not all VPNs are capable of bypassing DPI and firewalls, as only providers with a performant server network can help you surf freely.
• It helps you secure your activities. The Internet brings efficiency to your fingertips. We work online, we chat online, and we shop online. All these important activities imply using sensitive data like credit card details and private conversations that a VPN can secure.
• A VPN is capable of enhancing your online experience. A gaming VPN may be the perfect tool to troubleshoot unreliable connections and protect the users against attacks. Besides gamers, torrenters also use a VPN to maximize their security while performing P2P file sharing. And if you think I’m crazy because I am promoting torrenting, you must know that, just like the VPN, torrenting is perfectly legal, as long as you do not share or download copyrighted content.
• It provides security for all your devices. In every household, there is at least one smart TV, a laptop, a PC, maybe a gaming console, and other devices permanently connected to the internet. All these require a secure and encrypted connection (and your phone/laptop needs it the most, especially when you use a public Wi-Fi network). VPN software is compatible with the most popular operating systems, so with one single subscription, you may secure all your devices. And where the VPN software won’t work, VPN hardware comes in handy to solve the issue with the devices that natively do not support a VPN connection or app.
• It helps you save money. Who doesn’t love a discount? Since international eCommerce platforms and even travel agencies apply preferential prices for certain counties, with a VPN, you can save money while shopping for your favorite items or booking a flight for your next vacation. 

Keep in mind that a VPN has its limitations too!

If you’re not an experienced technician or if you’re using a VPN for the very first time, make sure you won’t dig that deep into the VPN’s settings. Before checking advanced settings into your app, please make sure you know what you’re doing, otherwise, you might risk having leaks or your activity exposed.

Another thing that you should know is that, from time to time, a secure VPN can have connection drops or it can slow down your connection. These drops are perfectly normal, this is why you should make sure you’re connecting to a VPN server that’s not overloaded.

What types of VPN exist, and what are your options?

Based on users’ particular needs, there are personal VPNs, business VPNs, and self-made VPNs. If you’re asking me, there are also free VPNs which you should totally avoid.

Personal VPN

The personal VPN is also known as a commercial VPN. This type of VPN service is the most popular, as it is specially designed and shaped for personal use. 

Personal VPNs are filled with out-of-the-box features and are usually transformed into Swiss army knives ready to achieve the most stringent criteria in terms of fast, secure, private, and anonymous connections. 

Business VPN

The business VPN or corporate VPN are developed to help companies secure their connection, work resources and improve work productivity. Business VPNs hand in hand with advanced VPN routers or even VPN concentrators can transform a company’s connection into a temple of security. 

Self-made VPN

A self-made VPN or a hand-made VPN is a VPN connection enabled directly by its user. Compared to a personal VPN, a self-made VPN brings the same level of security but it lacks the advanced features that normally boost a VPN user’s experience.

Free VPN

The world-wide-web is filled with free VPN services. Among the endless number of options, VPN Gate, for example, is a free VPN solution with millions of users, developed as an academic project. Yet, the level of protection provided by such a service is not always the expected one. Therefore, my advice would be to avoid falling into the trap of thinking that you don’t have something to hide and start using free services when, in reality, your online privacy and security are as important as your real-life ones.

How does a VPN work?

Since we started this article with a bedtime story, I think we should keep it on the same register. In most bedtime stories, there’s a witch who stirs in her magic potion, adding all sorts of ingredients. Considering the benefits a VPN brings, some of us might think it is witchcraft. But what are the special ingredients added to the magic potion?

A VPN consists of a combination of three main ingredients – a VPN server, a VPN protocol, and VPN encryption.

So, what do we do with all these goodies? We take a huge pot, also known as the VPN app. To obtain a magic potion at the end, we should start with the VPN server, which would be the first ingredient. Right after adding the server and stirring a little bit, we must add the VPN protocol and the VPN encryption. When the three ingredients start to mix, they will automatically encrypt your data and transport it to its destination on the web. The whole procedure is reversible, so your internet connection is secured from an end to another, back and forth. 

How to use a VPN for dummies?

Using a VPN is as easy as breathing. Let’s face it! You don’t have to be a tech guru to know how to install an app on your device and click or tap on a button. When it comes to using a VPN, things as no different than that. Of course, there are advanced methods, like buying your server and manually setting up your connection to create your self-made VPN but, who has time for that in the digital transformation era? 

VPN software is taking users’ online experience to the next level due to ease of use, speed, performance, and features. VPN software is none other than the popular apps, once installed on a device, help you connect to a VPN server and enable a VPN connection within seconds.

A VPN client or app is a controlled and automatic method that integrates all the VPN components. Moreover, it comes with advanced security features that add up to the whole process. Such features are obfuscated VPN servers, VPN split tunneling, VPN KillSwitch, leak protection, and even top-notch protocols like WireGuard, Stealth VPN, SoftEther, or Shadowsocks. 

Getting your hands on a performant VPN is not a hard task, as plenty of great options are literally at a click away. Providers like NordVPN, ExpressVPN, CyberGhost or StrongVPN go the extra mile for their customers in order to provide highly performant apps compatible with the most popular operating systems like Windows, Mac, iOS, Android, and even Linux. 

Steps for enabling a VPN connection.

Now that we know how easy it is to surf the web securely and anonymously, let’s recap what we need to do and learn tips and tricks for improved privacy.

1. Find the best VPN provider that meets your needs. Before starting your research, keep in mind to never opt for a free VPN and that there are VPNs that do NOT protect your privacy. Choose wisely, and don’t be stingy. Your online privacy is more valuable than you might think.
2. Now that you found your provider, proceed with creating your account and download their app.
3. Log in, open the app and start exploring it. Check the list of features and the selection of the protocol. Tip: for both enhanced security and ultra-fast connections, go for protocols like OpenVPN or Wireguard.
4. Connect to the server. Tip: if you’re not interested in unblocking a website available only in certain countries, make sure to pick a server close to your location. The speed of your connection is influenced by many factors, including the physical distance between your real location and your server’s.
5. Test your VPN by checking your IP address via existing online tools. Keep in mind that testing your VPN connection is mandatory every time you switch the server.
6. Surf the web in complete privacy, security, and anonymity. But, before that, check the images below and see how easy is to get and use a VPN app for Apple’s iPhone.

We are almost there…

Is double VPN a type of VPN?

The double VPN solution is not a type of VPN. Double VPN is a type of VPN server that some services provide that allows you to browse anonymously and securely by connecting to a chain of VPN servers. In simple words: VPN on top of VPN (or VPN tunnel inside another VPN tunnel/VPN chains).

While browsing the internet without a VPN, your connection to any remote server is like this: you -> destination server.

When you are using a regular VPN, the connection is like this: you -> encrypted connection to VPN server -> destination server.

With Double VPN: you -> encrypted connection to VPN server #1 -> encrypted connection to VPN server #2 -> destination server.

Besides the military-grade encryption that a regular VPN server provides, a Double VPN server will enhance your internet anonymity and security by adding an extra layer of encryption to your connection. 

The result is a double encrypted, 100% secure internet connection. Cracking this type of military-grade encryption is impossible, even if a hacker would have the skill or the patience to do it.

Is the VPN related to proxy or SmartDNS?

While looking for the best tool to avoid censorship, you might find these three main solutions. Novice users can fall into the trap of thinking that these solutions are the same, especially since top VPN services are providing them all. In reality, the only resemblance between them is that all are fit for bypassing internet restrictions.

The VPN definition is already clear. What we should keep in mind while comparing these three technologies is that the VPN provides encryption. 

Compared to the VPN, proxy, on the other hand, uses a proxy server to help you change your IP address and to access blocked websites. In most cases, this proxy server is just another computer acting as a middleman, changing your IP address, and helping you surf freely. A proxy is incapable of encrypting your personal data and, obviously, providing a secure connection. The most popular tool that enables you to connect to a proxy server is a proxy extension for your browser. Additionally, you can, of course, set up a proxy connection for your device manually.

When it comes to SmartDNS technology, this solution won’t hide your IP, nor encrypt your traffic. Instead, it will trick websites into seeing your location as an eligible one and, of course, granting you access to the website you wish to unblock. As it does not use encryption, SmartDNS is considered the fastest and easiest way to unblock websites.

What VPN alternatives do users have?

First of all, I am not sure why someone would want to use a VPN alternative when nothing is beating a VPN. 

When it comes to online privacy and security less is not more. Yet, for users who settle for less, they can opt for proxy or SmartDNS. On the other hand, we have Tor. Tor is a bold choice, as is not safe and private. 

Tor is an open-source software developed as a solution to help people in the NRL enable a secure and encrypted means of communication. Nowadays, Tor is used to access onion websites. Even if it is legal to use Tor, the constant use of this browser can mark you for surveillance by your ISP. Plus, let’s not forget what content is shared on the dark web. So, always think twice before deciding to swing between Tor nodes!

What to look after when choosing a VPN?

When you decide to upgrade your online experience by using a VPN, it is important to do a bit of research before picking the best VPN for you. 

A trustworthy VPN provider brings plus-value to the market via the security features or other benefits it provides to its customers.

Here are a few things you should look after:

1. Zero logging – the first thing to keep in mind is that you should choose VPN providers with a clear NO Logs policy. Also, your future VPN should respect the data retention law and should be GDPR compliant.
2. VPN servers – the VPN servers have an important role in your VPN connection, and so do the number of VPN server locations. That’s why it is mandatory to pick a VPN that provides servers located all around the world. 
3. Customer support – because you’re about to start your VPN journey, it is not enough to find a VPN that just works. You need to make sure you will receive all the support you need. Choose a service that allows you to ask for support via multiple channels like live chat support, social media, or support ticket systems. Prompt customer support is gold in hard times.
4. VPN apps – a VPN service should also provide a generous list of VPN apps, for the most popular operating systems. 
5. VPN protocols – less is not more when it comes to VPN protocols either. The longer the list of protocols provided, the better. 
6. Advanced VPN features – if you think that you’re a novice and you don’t need advanced features, you’re wrong. VPNs are not rocket science, and you will get used to the VPN software really fast, as it doesn’t imply any manual settings or advanced technical knowledge. Advanced VPN features will be, in short time, the cherry on top of a yummy VPN pie.
7. The most-wanted free VPN trial (and even the money-back guarantee policy) – reading about certain VPNs on the specialized reviews websites is helpful, but testing its performance on your own is even better.

VPN for dummies FAQ.

Here is a list of short answers to the most popular FAQ on VPNs

Are you still here?

As you can see, we could talk about VPNs for days.

What you should keep in mind after reading this article is that no matter if you’re looking for the best option to browse anonymously, unblock your favorite online content, download torrents, or search for the cheapest plane tickets, a VPN can always help you.

There are lots of goldfishes in the sea, so make sure you choose the one that is capable of making your online-security related wishes come true.

Always browse safely!

Your data is … yours and you should keep it yours! Otherwise, you become the product and, sooner or later, a target for marketers, on one side, and hackers, on the other side. Do you want that?

VPNs should, by definition, protect your data, but sometimes they don’t. Don’t be fooled by marketing headlines and incomplete service descriptions! Take care of your data, do your own research, and avoid services that are too good to be true (e.g., free ones).

Do you remember the story of Pinocchio and the chapter when he meets the Fox and the Cat? Due to his naivety, Pinocchio not only trusts the two, but he even offers them a sum of money from the potential gain. Their answer is well-known:

“We do not work for gain,” answered the Fox. “We work only to enrich others.”

“To enrich others!” repeated the Cat.

“What good people,” thought Pinocchio to himself.

Even small children understand that the Fox and the Cat do not have good intentions. However, Pinocchio is blinded by their sweet words.

When it comes to online privacy, don’t be a Pinocchio. Look around, read between the lines, and assume the worst. Consider the possibility that the service intends to get the most of your private data.

This article explains why privacy is important when it comes to VPN services, how you can do your own research, why you should stay away from free VPNs, and lists several VPNs that may not be your best friend for keeping your private data safe.

What is VPN privacy important, and how can a VPN get your data?

A VPN (Virtual Private Network) can see everything you do online, and it may log your activities. Moreover, by ignoring your right to privacy, malicious VPNs may use or sell your data.

According to a scientific study on Android VPN apps, the following practices are quite common:

• Third-party user tracking – 75% of the apps analyzed used tracking libraries to monitor user activities.
• Malware injection – over 38% of the studied apps contained some malware presence detected by VirusTotal.
• Traffic interception – about 16% of the analyzed apps might forward traffic in a peer-forwarding fashion rather than using their own hosted machines.
• Traffic manipulation – 16% of the analyzed VPN apps deployed non-transparent proxies to modify user’s HTTP traffic. Also, several apps actively injected JavaScript code for serving ads and redirecting e-commerce traffic to external ad partners.
• App permissions abuses – 4% of the analyzed VPN apps used the app permissions to implement localhost proxies to intercept and inspect user traffic locally.

Unfortunately, most VPN users are not aware of these practices. The same study analyzed the public user reviews of the VPN apps on Google Play and showed that only a small number of VPN users have publicly raised any concerns.

For your own sake, you need to be one of those concerned about their online privacy. It would help if you did your homework, did your own research, and looked for red flags when choosing your VPN provider.

How to do your own research

Every time you subscribe to a VPN service (as a matter of fact you should do this with every service or app you subscribe to that has access to your data) you should take at least five minutes and look for:

• the contact information;
• the company running the service;
• the privacy policy page;
• any news or articles on the Internet related to the service.

And you should ask yourself questions like:

• Is the contact information easily available on the website? Is the physical address listed clearly?
• Is the company running the service listed with identification info (e.g., tax id)?
• Does the privacy policy present the way the service process users’ private data? Does the service log data? Does it share the data with third parties?
• Are there any independent audits publicly available? Take a search on “[VPN name] audit.” Look for independently performed audits by reputable companies (e.g., PricewaterhouseCoopers) rather than self-made audits.
• What info can you find regarding the reputation of a VPN service by searching online? You can try, for example, “[VPN name] privacy concerns” or “is [VPN name] safe?”. Take your time and read 2-3 articles and judge for yourself.

If you have the slightest doubts that the VPN is fully engaged in protecting users’ privacy, search for another provider. There are plenty of excellent ones. Just take a look at the list of VPN services that offer access to the WireGuard protocol.

Are free VPNs safe?

You have probably heard this before: “If the app you are using is free, then you are the product!”. It means that one way or another, sooner or later, the free app or service will get paid for letting you use it.

Does that mean that your data is sold and your privacy is endangered? Not necessarily, but there is no way you, as a user and private person, can verify how your data is managed and the consequences of using a free service.

A VPN service has access to many private data based on its functioning principle. It can “see” your browsing habits, for example, and it may use this info in various ways (it can sell this data to interested companies or partner with companies that target you for numerous products).

Taking all these into accounts I do not consider free VPNs safe.

You may be tempted to believe that freemium services (those offering both free and paid plans) are safer. And, generally speaking, they should be. However, as the cost of providing free VPN services are high (due to infrastructure costs), many freemium VPN services look for additional ways to monetize their users. Thus, my advice is to stay away from them too.

VPN services that may not protect your privacy

Several VPN services are either transparent of exploiting user data or exposed publicly for unfair practices. We have gathered a list of such services and explained why it is advisable to avoid them. If you know of other similar services, please let us know in the comments sections.

[1] Hotspot Shield

Hotspot Shield apps are installed on millions of devices all over the World, and the VPN service is considered to be one of the most popular VPNs available on the market. Of course, Hotspot Shield began as a free service and later switched to the freemium model. However, it seems that Hotspot Shield’s practices are not as transparent and privacy-oriented as one expects from a VPN provider.

1. The company behind the HotspotShield service

Hotspot Shield is (now) run by Aura, a group of companies (most of them located in the United States) that manage several VPN services. This should not be a problem by itself if there were no privacy and security concerns related to several VPNs owned by this group.

2. Aura’s privacy policy

Strangely, Aura’s privacy policy page does not mention Hotspot Shield but lists other VPNs like Betternet, Hexatech, and Touch VPN.

The privacy policy of Aura clearly states that their applications use various tracking technologies (Cookies, Pixel Tags / Page Tags / Web Beacons / Tracking Links, SDKs) to collect information about their users.

The user-related info is used, among others, to serve ads (!).

Moreover, it looks like the data collected from Aura apps is shared with third-party services that may, in their turn, use the data for marketing purposes and serve ads.

3. Service security

In 2018 a security researcher found a way to identify Hotspot Shield users. The data leaked (country where the user was located and the user’s Wi-Fi name) could have been used to locate the user. The Hotspot Shield development team rapidly fixed the problem, but the Hotspot Shield apps’ security policies’ concern remains.

4. Third party auditing

In 2017, CDT (the Center for Democracy and Technology) filed a complaint signaling “undisclosed and unclear data sharing and traffic redirection occurring in Hotspot Shield Free VPN.” In plain words, CDT said that Hotspot Shield was misleading users related to the amount of data shared with third-party partners.

And the CDT conclusion says it all:

“Consumers who employ Hotspot Shield VPN do so to protect their privacy, and Hotspot Shield’s use of aggressive logging practices and third-party partnerships harm its consumers’ declared privacy interests.”

Additionally, Hotspot Shield was also found using various shady practices such as:

• injecting Javascript code for advertising and tracking;
• using various tracking libraries;
• redirecting traffic to e-commerce sites.

Conclusion: Hotspot Shields and the companies running the service do not seem to be interested in complete privacy and anonymity. Hiding the IP address and encrypting traffic is not enough! Thus, my advice is to avoid them.

[2] Betternet (asa well as Hexatech and TouchVPN)

Betternet is a hugely popular VPN service with millions of users from all over the World. It started as a free service, and then, a few years back, it switched to the freemium model.

However, there are some red flags regarding the Betternet service.

1. The company behind the Betternet service

It is quite a challenge to find out who runs the service. On the Betternet website, Betternet LLC is listed. However, the Terms and conditions page mentions Pango and Pango GmbH as the entities behind Betternet. Strangely, when one clicks on the link to the Pango privacy policy, one is redirected to … (surprise!) Aura, the same group of companies that own Hotspot Shield. Additionally, other VPN services are mentioned, such as Hexatech and TouchVPN.

Of course, the same privacy policy applies to all services managed by the group, which implies that user tracking is performed at scale.

2. Service security

A service vulnerability that allowed hackers to push fake updates and install malicious apps was discovered in 2020. The Betternet team fixed the issue rapidly after it came out, but the question regarding Betternet security practices remains.

3. Third party auditing

The Betternet Android app was listed in the article that presented VPN apps that included tracking technologies. The Betternet app had, at the time of the study (2017), no less than 14 tracking libraries!

Conclusion: is Betternet safe to use? I don’t think it is. You should better find other VPNs that have a better reputation.

As Hexatech and TouchVPN are also run by Aura my advice is to stay away from them too.

[3] Hola VPN

Hola is another hugely popular free VPN service. However, it logs as much info about you as it can. On the positive side, their privacy policy is transparent about their extensive logging policy.

And, here it is what Hola logs:

• your IP address;
• name and email address, screen name;
• payment, billing information, and any other information you provide to the service;
• when you register through a third-party website (such as Gmail), Hola gets access and logs your user name, email address, profile picture, birth date, gender, and preferences.
• when you register through a social network account (e.g., Facebook), Hola gets and stores the followings: your full name, home address, email address, birth date, profile picture, friends list, personal description, as well as any other information you made publicly available on your social media account;
• installed applications from your devices;
• browser type, web pages you visit, time spent on those pages, access times, and dates (for free users).

As you can see, by using Hola, your private data stops being private. It is transferred, stored, and probably used by Hola.

Moreover, Hola shares gathered data with “trusted third-party service providers or partners for the purposes of providing you with the Services, storage, and analytics.” This means that your data is furthered processed and used, probably, against you.

And, yes, Hola may hand you your data and your profile to authorities, even though Israel, where Hola headquarters are located, is not a “Fourteen eyes” country.

Conclusion: stay away from Hola if you consider that your data should remain private!

[4] PureVPN

PureVPN is a solid VPN provider with a privacy policy that states clearly that the service does not keep “any logs that can identify or help in monitoring a user’s activity”.

However, PureVPN was caught logging user data. In 2017, an investigation made public revealed that PureVPN provided data to the FBI for the criminal case. That proved that the “no logs” claim was untrue. This should raise some concerns for those interested in privacy and anonymity.

It is fair to mention that in 2019 and 2020, PureVPN completed two no-logs audits conducted by Altius IT and KPMG, respectively. The audits confirmed that, at the time of the audit, PureVPN kept not logs, and they “did not find any evidence of system configurations and/or system/service log files that independently, or collectively, could lead to identifying a specific person and/or the person’s activity when using the PureVPN service.”

Conclusion: Is PureVPN safe? Taking into account the latest audits, we may say it is. However, the fact that at some point, PureVPN shared user data with authorities remains a red flag.

Summary

Your personal data is important, and you should keep it private. It sounds obvious, but sometimes it is not. Especially when it comes to data privacy in the Internet world.

Plenty of apps and services gather access to your data and use them for their own gain. Don’t let this happen!

Online privacy and security are built on trust. That is why we have listed several VPN services that may have trust issues and that you should, in my opinion, avoid.

Do you know another VPN provider that should be on the list? Feel free to let us know in the comments below. Would you like to be notified when we publish new articles? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

A mind at ease is already pleased. That is why I like to think that happiness doesn’t exist without peace of mind, just like hardware couldn’t work without its better half, the software. Since we’re talking about hardware and software, let’s discuss the VPN hardware vs. VPN software topic with a pinch of peace of mind.

So, on this post’s menu, we have the following selection: why is VPN important for our peace of mind, what is VPN software, and what makes it different than VPN hardware?

Let’s have a soft start to this article and begin with the Transylvanian explanation of VPN hardware vs. VPN software.

VPN hardware vs VPN software. The Transylvanian explanation

One upon a time, a friendly vampire lived in Transylvania. No matter how amiable he was, people avoided him. Therefore, he lived a very lonely life, a thing that made him really sad. Immortality was a heavy burden on his shoulders, as an eternity of loneliness sounds depressing even for vampires.

The fear he aroused among the people made him take the radical decision of never leaving his castle again. In just a few months, he read all the books in his library, watched all the series and movies on Netflix, and deep cleaned even the most hidden corners of his attic.

Driven by despair, he ordered a large mirror from VAMazon, the biggest e-commerce platform for vampires. In just a matter of days, he had the mirror delivered and installed in his castle chamber. He was excited beyond words that he will be finally able to see something moving around, except his shadow.

Despite his expectations, the idea of ordering a mirror proved to be a bad one. Why? Because he learned with astonishment that vampires’ reflection is not visible when they stand in front of a mirror. So, he started crying so loud that TomBat’s flock heard him from the far. They all gathered and decided to fly and follow the sounds. When they arrived at the castle’s open window, they saw the friendly vampire crying and crawling in pain.

Just like superheroes, they entered the room and surrounded the crying vampire. When he saw that some living creatures entered their chamber, he couldn’t believe his eyes. The friendly bats and our lonely vampire became best friends and, from that day on, as soon as the sun went down, they roamed the Transylvanian streets, having fun and enjoying the beauty of life.

Why is this story relevant to our VPN hardware vs VPN software discussion?

Because, my friends, hardware is a physical component of a computer, something we can see, like a mouse, a monitor, firewall, or a router. The software is a collection of instructions, tasks, and procedures, that are not visible, even if there are running “in front of us” on our computer.

So, our friendly vampire is, basically, hardware, as we can see it (and if we are brave enough, we can touch it), while the vampire in the mirror is the software since is there, but we can’t see it.

VPN technology is like a dose of chocolate for your internet connection. If chocolate would be able to help even a vampire hide his sadness on a Friday night, what do VPNs hide and do precisely to ensure peace of mind?

To use… or not to use a VPN?

I feel like we’re still at that point where internet users know stuff about VPN (Virtual Private Network) but consider this technology a tool for IT staff and tech gurus. In reality, the VPN is legal and easy-to-use, and it helps you accomplish the most basic online activities in complete online privacy, anonymity, and security.

The real question remains: What option does an internet surfer have when it comes to using a VPN? The answer is pretty simple; he can manually set up a VPN on the device of choice or go for VPN hardware or VPN software.

What is VPN hardware?

In IT, hardware (abbreviated as HW) is described as a physical and tangible component of a computer. Even its name leaks its definition. So, any component with a cord, or wirelessly attached to your computer or laptop is hardware. I also like to say that, without hardware, a computer would not exist, and without software, your hardware would be useless. Some examples of hardware: mouse, keyboard, webcam, hard drive, VPN firewall, RAM.

When it comes to the VPN world, there is VPN hardware that helps internet users protect one or more devices simultaneously. The best examples would be a VPN router or a VPN concentrator.

What is a VPN router?

Let’s be honest, nowadays, in every household or company, there are several computer and mobile devices connected to the Internet at the same time.

When you need to connect to the VPN from a bunch of devices simultaneously, having to connect to a series of applications might be time-consuming. To skip a few annoying steps, you can use a VPN router that helps you have a continuous active VPN connection fast and easily.

A VPN router is a regular router that supports various VPN protocols. Therefore, with the help of a VPN router, you can skip the manual configuration of the VPN on each device and enjoy a safer internet in a facile way.

Plus, a VPN router helps you ensure a secure and reliability for devices that otherwise are incapable of running a VPN service (Roku, Apple TV, or Xbox), cuts out the necessity of installing a VPN app, is easy to set up, and a great option for small businesses.

VPN users have a wide range of VPN routers to choose from. If you think about expanding your horizon and look for a VPN router to test its capabilities, Asus, Linksys, and Vilfo are three options worth trying.

What is a VPN concentrator?

Just like the VPN router, the VPN concentrator is hardware that acts like a networking device, capable of establishing multiple VPN connections and manage all of them at the same time.  The most important aspect any user should know about a VPN concentrator is that this standalone device suitable for large-scale corporations who want to provide a secure connection for their employees and allow their remote workers to easily and securely access the company’s resources.

These devices allow data encryption/decryption and create and manage multiple VPN tunnels in a single corporate network and manage users’ authentication and cryptographic keys.

The huge downside of a VPN concentrator is the price. Yet, companies decide to make a smart investment for their business and network security. From what I have read and heard, Cisco Meraki is a top-notch device that changes the way corporations manage their VPN network. 

What is VPN software?

It’s not much to say that software is your hardware’s boss. Software represents the set of programs and procedures that ensure the operation of a computer or device.

Just like any other application, VPN software allows users to enable a connection with a VPN server.

The VPN client software is an automated and controlled method developed to connect to a VPN server easily. The VPN providers are usually developing these kinds of security solutions for the most common operating systems (Windows, Mac, iOS, Android, and Linux).

Therefore, VPN software combines the VPN components (VPN server, VPN protocol, and encryption) in a single and compact application that allows users to activate a VPN connection with just a click.

Due to its ease of use, which requires no technical knowledge, a VPN app is a great option for people who don’t own technology at their fingertips. Plus, it allows users access to out-of-the-box features designed for advanced security or speedy connections. Among these VPN functions, I would mention Double VPN, Tor over VPN, obfuscated VPN, KillSwitch, selection of special servers for gaming or torrenting, split tunneling, secure protocols like WireGuard, OpenVPN, or Shardowsocks, SoftEther, or options that allow you to connect to the fastest server, based on your location.

Just check how, in two steps, you are able to surf the web securely and without restrictions.

When it comes to the available option, you must know that there is native VPN software created by VPN protocol developers (OpenVPN, WireGuard, SoftEther) or third-party VPN apps created by the best VPN service providers (NordVPN, ExpressVPN, StrongVPN, CyberGhost, etc.).

VPN hardware vs VPN software

Maybe you think that comparing software with hardware is inappropriate. Since the purpose of both VPN hardware and VPN software is to create a VPN tunnel and ensure a private means of communication between one’s device and the Internet, I see no problem comparing them.

Security, the capability of unlocking restricted content, seamless connections, or speed are just a few important aspects a VPN-related product should meet. So, let’s see how VPN hardware and VPN software perform when it comes to users’ key expectations.

Security

A VPN’s main purpose is to create a private and secured connection between a user’s device and the world-wide-web. Security is also important, no matter if you’re a company or a person. In both these cases, sensitive information that needs to be protected is sent over the web.

The great news is that VPN concentrators and reputable VPN apps do a great job at encrypting and securing the traffic.

Speed

In the era of ultra-fast Internet connections, who has the time to wait for his page to load? It’s no news that a VPN may cause connection speed loss, so it’s mandatory to test a VPN before actually subscribing. Just like in the case of security, when it comes to fast connections and an awesome online experience while working (or better, while unblocking BBC iPlayer or Netflix), both solutions do a great job fulfilling these goals.

Setup

Now that we know VPN hardware and software are great for security purposes and provide satisfying speed let’s find out what setting up such solutions implies.

I am pretty sure you’ve installed a bunch of apps so far. You know how things go – download the app, click on the install button, wait a few seconds, and, just like magic, the app is there, at your disposal. Installing VPN software is not different. Therefore you don’t have to be a geek to accomplish the task.

On the other side of the bridge, we have a hardware VPN that requires some nerves and tech knowledge, as you will need to do mainly everything manually.

The capability of unblocking websites

Internet censorship and other online restrictions take over users’ online freedom. Users in China or Korea are not able to surf the web regularly. Youtube, Google, even Facebook or Instagram are banned in these countries. Therefore, regaining their online freedom and rights are essential aspects for plenty of internet users.

VPN proves to do a pretty good job at unblocking geo-restricted content. There are even special protocols integrated into VPN apps developed for such purposes.

Unfortunately, hardware VPN is not capable of unblocking restricted content. I am not sure if this is a drawn-back, as the purpose of a VPN concentrator, for example, is not to allow employees to access Netflix but to work securely, safely, and to improve productivity.

Remote access

It’s clear who’s the winner, right? Hardware VPN is specially developed to provide secure remote access. Therefore, it does a stellar job fulfilling this task.

On the other hand, software VPN does not provide you the exact IP address every time you connect to a server. Yet, there is the possibility to opt for static or dedicated IP addresses, a benefit that VPN providers usually support.

Scalability

Let’s say that you’re a company that goes for a hardware VPN. In time, your company expands, and your number of employees grows. If your device supports only 150 connections, then your 151st employee will not use the VPN connection. Therefore, in the case of hardware VPN, scaling is not something that defines this solution.

It is known that VPN apps are more popular among regular internet users. VPN services usually provide up to 15 simultaneous connections, which should be more than plenty for a household.

Price

A VPN is a must-have these days. But if a VPN solution is too pricy, that it will remain only nice to have.

The price for a hardware VPN ranges from $50 to “shy is the limit.” On the other hand, you can get a VPN subscription from a top provider that comes with plenty of apps and lots of perks for just a few bucks. Moreover, VPN providers spoil their customers with generous discount campaigns when anyone interested can get a VPN with up to 80% OFF.

Before closing the book on the price subject, I must highlight that, no matter how low on a budget you are, never opt for a free VPN or lifetime subscriptions. NEVER!

Final thoughts.

VPN hardware vs. VPN software subject brings to light the pros and cons of these two solutions. Yet, security, the most important aspect that these two technologies must meet, is checked.

When it comes to their target market, hardware VPN is more popular among companies who need to secure access to their network. Simultaneously, software VPN is suitable for private users who want to secure their traffic while connected to a public WiFi network, avoid ISP surveillance, unblock websites, avoid bandwidth throttling, encrypt their connection, and other VPN appliances.

Price is another important decision-maker, and, in this particular case, software VPN is way cheaper than hardware VPN.

Another thing that you should keep in mind is that subscribing to my newsletter is free of charge. I promise you newsletters, filled with catchy tech talks, sent to your inbox straight from Transylvania.

WireGuard is a relatively new VPN protocol that has gained a great reputation due to its speed and simplicity. Using WireGuard on Windows is simple, and you may get started in a matter of minutes. This article explains how to set it up on Windows 10.

WireGuard Windows setup [Summary]

To use WireGuard on Windows you may either install the WireGuard VPN client or a third-party VPN app (also known as VPN software) that uses the WireGuard protocol.

• Prerequisites:
  • Access to a WireGuard config file provided by the server admin or to a VPN service that implements the WireGuard protocol.
• Option 1: Download and configure the WireGuard VPN client for Windows.
  • Step 1: Install the official WireGuard app.
  • Step 2: Import the configuration info or create a new tunnel from scratch.
  • Step 3: Enable the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to the WireGuard protocol. Download the Windows app, select the WireGuard protocol (if needed), and connect.

If your goal is to set up a VPN connection on Windows, you may also take a look at our article on how to set up a VPN on Windows. `You will find out how to choose your Windows VPN provider wisely.

Why is WireGuard great for Windows

WireGuard is a new VPN protocol created by Jason A. Donenfeld that is considered an excellent replacement for OpenVPN. Even though it was initially developed for Linux, WireGuard works excellent on Windows as well as on other operating systems (macOS, iOS, Android).

WireGuard is a great choice for Windows users as:

• It is free and open-source.
• It uses state-of-the-art encryption and cryptography.
• WireGuard is remarkably fast and faster than OpenVPN.
• The WireGuard Windows client app is stable and easy to use.

WireGuard works great on all types of devices, including those with limited computing power. It uses fewer resources and, thus, offers great performance.

To sum up, the WireGuard protocol is a great choice for Windows, and you should consider it as your main tool for encrypting your data.

How to install WireGuard on Windows

You may use WireGuard on Windows either by installing the WireGuard Windows client app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Windows

Firstly you need the connection credentials of a WireGuard server. You may obtain them from a VPN provider (e.g., OVPN, Mullvad) or the VPN server administrator (you may also set up your own server).

Most of the time, you will get a configuration file that contains all the necessary info (server address, private/public keys, DNS addresses, allowed IP addresses, etc.) that looks similar to this one:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Windows 10 proceed as follows:

1. Open the WireGuard official website.
2. Download the Windows Installer.
3. Start the WireGuard Windows app.
4. You have two options:
   • Create a new tunnel (Add Tunnel from the bottom-left corner of the window app) – enter a name for the tunnel, the public key, and the other connection properties.
   • Import tunnel(s) from file – in case you have received a WireGuard conf file from your VPN provider or the VPN administrator you may import it and get all the tunnel properties at once.
5. Next, turn on the VPN connection by clicking the Activate button.
6. If the connection credentials are correct, you will see the connection succesful message on the bottom-right of the screen.
7. To disconnect, open the WireGuard app and click the Deactivate button.

Blocked untunneled traffic (kill switch)

If you edit an existing connection you will notice the Block untunneled traffic option. It is a Kill Switch mechanism that adds Windows Firewall rules to block traffic that tries to bypass the VPN connection. This option can be enabled if the configuration has exactly one Peer section and AllowedIPs is set to a catch-all address.

Install a Windows VPN app that offers access to WireGuard

If you are interested only in the benefits exposed by WireGuard (fast connections, great download/upload speed) and you don’t want to know more about the technical implementation, you may use a VPN app provided by a WireGuard VPN service.

The first step is to find such a VPN service. We recommend one of the following: NordVPN, Surfshark, Hide.me, PrivateInternetAccess, but there are many more.

Next, download the Windows app from the provider’s website and install it. Further, enable the WireGuard protocol (for most of the apps WireGuard is not yet the default protocol), and connect to the VPN. You are all set up with WireGuard on Windows!

WireGuard on Windows FAQs

Summary

WireGuard is a secure and fast VPN protocol, and it works great on Windows, as well as on Android, on iOS, on Mac, or Linux. Installing a VPN app that supports WireGuard is the fastest way to get started. However, you may use the official WireGuard VPN client app and set the connection manually.

Have you found our article on how to use WireGuard on Windows useful? If so, subscribe to our newsletter! We will let you know when we publish new WireGuard-related articles, and you will make a Transylvanian baby-bat happy.

The history of the VPN (Virtual Private Network) technology is closely related to Microsoft’s PPTP and goes back to 1996. Tunneling protocols already existed, as, without them, the data packet moving from a network to another wouldn’t be possible. Therefore, the PPTP didn’t reinvent the wheel, but it brought along a more secure and private way of communication.

With the Internet expanding and cybersecurity blooming, VPN technology transformed into one of the most powerful and easy-to-use tools for enhanced online security and privacy.

Large corporations spotted the potential behind this technology, and the VPN became popular among businesses from the very beginning. Due to the market’s constant request for advanced security solutions, another option came to life – the VPN concentrator.

What is a VPN concentrator, who uses a VPN concentrator, and why is a VPN concentrator different than a VPN router – are just some of the questions I will answer in this article.

So, CONCENTRATE and stick with me!

The Transylvanian explanation

For a while now, the MegaBats are terrorizing the pacifist bat colonies. Moving to my castle was only a temporary solution. As soon as TomBat and his bat gang decided to return to their cave, the MegaBats started to bother them again. Not only do the little evil creatures bully their neighbors but, since the winter is not showing signs of leaving and their food supply is going low, the MegaBats started some attacks against TomBat’s colony, meant for stealing their food.

The intruders conducted some successful missions, and if they continue to do so, TomBat and his neighbors are at risk of remaining without food and starve.

Since the aftermath is not in the good bats’ favor, they needed to come up with a fast and efficient solution to keep the MegaBats away from their cave.

After a bat-council meeting, the final decision was to install not only one but a bunch of surveillance cameras around the entrance of their cave, placed in different positions and angles, so they can spot the MegaBats ready to attack, spying around the corners. In this way, they can gather forces and guard the main entrance of the cave, preventing MegaBats from entering and reaching the supply pantry.

The investment in the surveillance system proved to be the right decision as it helped the bats to keep away the mighty intruders.

When it comes to real-life challenges, a solution that would help more than one individual keep away mighty hackers and online threats would be a VPN concentrator.

“How?“, you may ask! This is how!

What is a VPN concentrator?

A VPN uses three main components (VPN server, VPN protocol, encryption) to create a private connection over a public network. Such a connection is also known as a VPN tunnel.

Anytime a VPN user enables a VPN connection, the VPN components combine and securely transport the data over the Internet.

VPNs meet the most stringent criteria in terms of online security, privacy, and anonymity. Therefore, they are a must-have for most businesses who operate multiple systems connected via a network. Enjoying a VPN’s perks implies that each remote employee has a VPN installed on his device. This condition translates into costs directly proportional to the organization’s dimension and the number of employees. Hence, a way to overcome this inconvenience but still enjoy the benefits of a VPN was mandatory. The answer to all of the pains is a VPN concentrator.

The VPN concentrator is a networking device capable of establishing multiple VPN connections and managing plenty of VPN connections remotely.

This solution for extensive security can manage VPN connections on a multi-user level in a “compact” and secure manner, making it the perfect solution for private and encrypted communication.

At this very point, you may think that there’s not much difference between a VPN concentrator and a VPN router when, in reality, there is more than one distinction.

Stick with me, and you’ll learn why I support this statement!

Why is a VPN concentrator useful?

If you’re curious what does a VPN concentrator do, then you must know that it puts the light on the same benefits as a regular VPN, and it also brings its pluses. 

Here are a few of the most important things a VPN concentrator accomplishes:

• Encrypt and decrypt the connection from an end to another
• Multiple VPN tunnels in a single corporate network
• New IP address for all users
• Manages users’ authentication and cryptographic keys

How does a VPN concentrator work?

A VPN concentrator is a device designed to ensure and facilitate communication between different VPN nodes, that uses either IPsec (Internet Protocol Security) or SSL (Secure Socket Layer) encryption protocols. This advanced solution helps remote users access a network and, implicitly, access files on certain computers.

Since it grants access to users located in different parts of the world, it is the most ready-to-hand solution for big companies that have to find a way to allow their remote workers to access the company’s resources so they can stick to their work and complete their daily tasks.

Looking again at things from this perspective, we may assume that a VPN concentrator is more like a VPN router.

VPN concentrators are often confused with site-to-site VPN services. The difference is that site-to-site VPNs have a fixed location limitation. They allow users to enable a connection only between fixed points (several offices, office-home office, etc.).

VPN concentrators are picked and set up based on a series of important factors – the type and the scale of the organization, the type of files that are about to be accessed and shared over the secured connection, and, of course, the security standards the company wants to achieve.

VPN concentrator vs. VPN router

VPN concentrators and VPN routers are similar devices (VPN hardware) that operate in the same way but are differentiated by a series of, let’s say, features.

The most important thing that makes these solutions so different is the number of simultaneous connections that can be established. If a VPN router has some limitations, you must know that a VPN concentrator can support thousands of users connected at the same time.

Yet, we have our first important conclusions: for meeting your corporate needs, you shall consider a VPN concentrator, and for multiple connections at home, go for a VPN router.

More connections bring along increased costs. A VPN concentrator is much more expensive than a router, that’s why not many people are just falling all over themselves to buy such an advanced and expensive device.

VPN concentrator encryption protocols

IPsec encryption

Internet Protocol Security (IPsec) is a secure network used by VPNs to facilitate secure and encrypted communication on the Internet. VPN concentrator providers consider IPsec as a good option since it is a secure and effective protocol. Through IPsec, apps are able to run without being aware that the client is coming from outside the network. The only disadvantage to his option is that, for enhanced security, additional tools should be configured and used to decrease the risks. Due to its working mode, an IPsec connection is the best way for connecting branch offices with the headquarter.

SSL encryption

SSL (Secure Sockets Layer) is the successor of TLS (Transport Layer Security) and is a protocol meant for establishing encrypted and authenticated connections between computers on the same network.

SSL VPN clients are installed into the browsers or operating systems, granting access based on a username and password.  

SSL VPNs eliminate the need to manually configure each end-to-end device. The downside of an SSL connection is that only web-based applications will work, therefore, users will not have access to shared resources like printers, or similar resources that they can access via an IPsec connection.

Which is the best VPN concentrator?

Folks, I need to spill the beans. I have never used or configured a VPN concentrator. Since some of you may be curious about which is the best VPN concentrator, I have decided to invest some time in researching which would be the best solution from the available options. 

After digging into the subject, the award goes to Cisco.

Cisco Meraki changes the way companies manage their VPN network, its VPN concentrators provide comprehensive security in a single box, are easy to deploy, and bring an impressive list of features, like the ones presented below:

• Intrusion prevention
• Auto VPN
• Next-gen firewall
• Content filtering
• Malware protection
• High availability & failover
• Centralized management

VPN concentrator FAQ

VPN concentrator – let’s concentrate on conclusions!

It is safe to say that VPNs come in lots of forms. Depending on the VPN provider you choose, you can use advanced VPN features like the VPN Killswitch, split tunneling, Smart DNS, state-of-the-art VPN protocols like Wireguard or OpenVPN, ultra-fast connections, and ready-to-use VPN servers designed for gaming, torrenting, streaming, online freedom or double protection. We can enjoy all these perks bundled with other benefits, with just a click, anytime we want to secure our internet access and sensitive information.

The sensitive information comes into question when we speak about the online tasks we perform at work as well. Our employer should pay as much attention to these details as we are paying as individuals. Can you imagine what an effort would be for a multinational corporation to buy and provide NordVPN or ExpressVPN client software for each employee? To overcome this difficulty, organizations have a great option at their fingertips – the VPN concentrator.

This device comes as a compact solution for managing thousands of VPN connections and securing all the information and traffic generated by employees based in different locations. Since its main purpose is to serve companies’ need for security and privacy, this powerful device is not suitable for regular internet users. For folks looking to secure multiple devices at the same time, a VPN router like Vilfo would do the job really, really well.

Are you curious what’s the other thing that goes great with online security? My bi-monthly newsletter you must subscribe to by using the form below. It will help you stay up to date with the latest tech news, and it will also make a Transylvanian-bat happy! It’s a win-win situation, trust me!

See you on my blog and in your inbox?

This article helps you set up an OpenVPN split tunnel on your device and get the most of your VPN experience by selecting the data that goes through the VPN tunnel.

I briefly explain what VPN split tunneling is, why you may need it, and how to set up an OpenVPN split tunnel.

OpenVPN split tunnel [Summary]

Depending on the type of OpenVPN VPN server you want to connect to (OpenVPN Access Server or OpenVPN Community Edition server), you have the following options:

• Connect to an OpenVPN Access Server:
  • Set up the split tunnel from the OpenVPN Access Server admin interface.
• Connect to an OpenVPN Community Edition server:
  • Option 1: Modify the OpenVPN config file.
  • Option 2: Use a VPN client app with split tunneling on OpenVPN.

What is VPN split tunneling, and why you may need it with OpenVPN?

VPN split tunneling is an advanced but useful feature provided by several VPN apps/VPN software and technologies. It controls the VPN traffic; more precisely, it directs some of the traffic through the VPN’s encrypted tunnel and some traffic to the standard, unencrypted channel through the ISP to the Internet.

It is a very convenient way to use a VPN for specific activities (e.g., unblock streaming channels or download torrents securely) and let other apps access local resources with your regular IP address.

A well set up VPN split tunnel provides a perfectly balanced approach for better security and great speed while using VPN only for specific apps or websites.

OpenVPN is (probably) the most commonly used protocol by the VPN services available on the market, even though WireGuard looks like a serious challenger. Thus, it is useful to know and understand how you can set up split tunneling on OpenVPN.

Solutions for setting up an OpenVPN split tunnel

You may connect to two types of servers with the OpenVPN protocol: the OpenVPN Access Server (the commercial one) and the OpenVPN Community Edition server (the free server used by most of the VPN providers). And, of course, the approaches to implementing the split tunnel depend on the type of server.

Split tunneling with the OpenVPN Access Server

OpenVPN Access Server is the commercial version of the OpenVPN server, designed and optimized for businesses.

If you are using the OpenVPN Access Server, then you may set up a split tunnel easily from the administration dashboard:

• Log in to the Admin Web UI.
• Navigate to Configuration > VPN Settings > Routing.
• Turn Should client Internet traffic be routed through the VPN? to No. From now on, the traffic intended for your private networks will cross the VPN. Other traffic will bypass the VPN.
• Additionally, you may specify subnets in the input field: Specify the private subnets to which all clients should be given access (one per line).

For more details regarding split tunneling on the OpenVPN Access Server, take a look here.

OpenVPN manual modifying config files

When you connect to an OpenVPN Community Edition server and access the OpenVPN config files, you may modify them and implement the split tunnel as you please. This is the case when you set up your own OpenVPN server or when you are subscribed to a VPN service that allows you to download the config files and use the OpenVPN client app to connect (e.g., NordVPN or OVPN).

To instruct OpenVPN use the VPN tunnel only for specific websites, here is what you have to do:

1. First, find the IP of the site you want to access via VPN. You may use the nslookup command or load an IP locator website (e.g., XMyIP.com), enter the URL of the website and get the IP address.
2. Open and edit the OpenVPN conf file (.ovpn). Any text editor will do.
3. Add the following commands:
   route-nopull
route [IP address of the website] 255.255.255.255
4. Save changes and restart the OpenVPN connection.
5. To remove the split tunnel, delete the two rows, and restart the OpenVPN connection.

The result is that only the traffic to the selected website(s) will use the OpenVPN encrypted tunnel, and the rest of the traffic will remain unencrypted.

You may need to additionally configure VPN DNS Servers to stop DNS leaks, as described here, at step 6.

This works on operating systems like Windows, macOS, or Linux (Fedora, CentOS, Ubuntu, etc.), and even on routers (here it is how to set up a VPN on a router).

VPN apps with split tunneling on OpenVPN

Several VPN apps that use the OpenVPN protocol can also split the data traffic depending on the user’s needs. The setup is usually quite simple, and it consists of selecting the apps that you want to use the VPN tunnel (or, reversely, the apps that you don’t want to use the encrypted Internet connection) and turning the split option on.

Great VPNs that offer OpenVPN split tunneling are Hide.me, ExpressVPN, PrivateInternetAccess, NordVPN (on Windows and Android), and Surfshark (on Windows and Android).

For example, for enabling the OpenVPN split tunnel on Hide.me apps you have to:

1. Open the Hide.me app (in this case, the macOS app).
2. Make sure you use the OpenVPN protocol: Menu > VPN Protocol > OpenVPN.
3. Next, open the Split Tunnel tab from the left menu.
4. Select one of the two options:
   • Do not allow selected apps to use the VPN (inverse split tunneling)
   • Only allow selected apps to use the VPN
5. The split tunnel will be turned on once the VPN connection is initialized.

How to test the OpenVPN split tunnel

My recommendation is to test your split-tunnel setup, no matter the solution you have chosen. For example, do not assume that a split-tunneling feature exposed by a VPN app works just because the feature is available. Many factors may influence the proper functioning of the app. For example, some users have reported that the ExpressVPN app does not properly establish a VPN split tunnel on Mac.

It would be best if you did not assume that your split-tunnel works perfectly as soon as you have finalized the setup. Many aspects may not go as planned.

My recommendation is to do the followings:

1. With no VPN enabled, load, for example, xmyip.com (IP: 67.227.194.148). Notice your public IP address.
2. Set the VPN split for xmyip (either within the OpenVPN config file, or by adding your favorite browser to the split tunnel list, as explained above).
3. Enable the VPN connection.
4. Re-load xmyip. Observe that your public IP address is no longer shown and the IP of the VPN server replaced it.
5. If the test was successful, you may proceed with the website or websites you want to access through the VPN.

OpenVPN split tunnel FAQs

Summary

OpenVPN is probably the most used VPN protocol and a prevalent option for all VPN usage scenarios. VPN split tunneling, which brings significant benefits, can be easily set up with OpenVPN either by adding commands in the config files or by enabling the option from the VPN apps’ settings.

This is the end of our tutorial on how to get set up VPN split tunneling on OpenVPN. Subscribe to our newsletter to get notified when we publish new articles. Additionally, you will make a Transylvanian baby-bat happy.

Geo-blocking is an internet censorship technique that restricts access to certain websites based on the user’s location. This practice is mainly applied by giant services such as Netflix, BBC iPlayer, Hulu, or Pandora, as they provide loads of intellectual property online. Since the copyrighted material is usually available only to a particular location or region, you can conclude why geo-blocking is practiced in the first place.

If you’re actively looking for a solution to overcome internet censorship and geo-restrictions, you have probably heard terms like VPN, Smart DNS, and DNS. What are these technologies, and who will win the fight between VPN vs. DNS vs. Smart DNS? Let’s find out together!

But firsts, let’s find out how the VPN vs. Smart DNS vs. DNS is explained in my location, Transylvania.

The VPN vs. DNS vs. Smart DNS competition. The Transylvanian explanation.

Springs brings not only beautiful colors to the Transylvanian fields, warm sun that spoils our faces, and happy birds that chirp at our windows in the morning. Spring also brings local competitions that spice up the whole majestic atmosphere.

The Castlevanian bats are crazy about one certain event that gathers all the vehicle enthusiasts in one place.

Le Tour de Castlevania is an annual competition that challenges its participants to find the best vehicle to take them from start to finish as fast as possible. In this year’s edition, the public’s favorites were PonyBat, TomBat, and AnonymousBat. Everyone was placing their bets, but the victory resumes to the participant who picks its vehicle wiselier.

On the competition’s day, people were more than surprised. PonyBat made her appearance with her pink cabin scooter, TomBat picked a motorcycle, while AnonymousBat made a humble appearance by choosing to ride his bike in the competition.

When the race began, TomBat started the competition with a breakneck speed, followed by PonyBat with her fancy scooter, then other bats riding ATVs, motorcycles, and crosses followed in the line. AnonymousBat was the last one in line for the title.

Unfortunately, our participants picking motor vehicles ignored some important aspects such as the traffic jams, waiting at the traffic lights, or the train barriers. All these impediments must be considered when you need to make it from point A to point B without obstacles and restrictions.

It was no big surprise when AnonymousBat started to surpass each of his opponents. Because he picked a bike, he was able to trick the system and ride the sidewalk when the traffic lights were red, and he was able to easily sneak through the heavy traffic, making it to the finish line before everyone else.

Why is this story relevant to our topic?

Because each of these vehicles and each of our technologies (Smart DNS, VPN, and DNS) are meant to take you from point A to point B. It is highly important to know what each of these does and how they facilitate your online journey.

The DNS, the motorcycle in my story, is meant to help you visit a website without you being constrained to include the exact IP address of your website you want to access in your web browser’s search bar.

The VPN, the cabin scooter in my example, helps you visit a website and bypass censorship while being protected and secured from ISP surveillance or hackers (this could translate as bad weather in my example).

The Smart DNS, the bike in my example, helps you visit a website and bypass censorship by tricking websites into seeing your location as an eligible one.

I know this may be a little too much to digest but have no fear, Vlad is here, ready to describe each technology from scratch.

What is DNS?

DNS stands for Domain Name System, and it is used to translate Internet domain names into IP addresses. This technology acts as an address book for internet domains. A domain name, like the one you visit at the moment (www.vladtalks.tech), has a specific IP address in the back. The DNS helps your browser translate your domain name into the exact IP address associated with the domain you need to access.

The list of domain names and IP addresses are distributed through the Internet in a hierarchy of authority. A DNS server is located close to your access provider that maps the domain names in your Internet requests or forwards them to other servers on the Internet.

Imagine how difficult would be to memorize the IP address of every website you need to access. The DNS surely knows how to ease our online experience while surfing the web.

What is VPN?

I get the sense that if you’re a constant reader of my blog, the VPN needs no further introduction.

Yet, practice makes perfect, right? Therefore, a little reminder never killed nobody (or at least I hope so).

VPN (Virtual Private Network) is used to add security and privacy to private and public networks, like public WiFi Hotspots. The VPN acts exactly like the cabin scooter in my example. It offers you protection against bad weather, and it transports you securely to your destination.

Usually, internet users set up a private VPN service, also known as a VPN tunnel, to protect their online activity and identity.

In an era where we are confronting lots of threats, like the rise in cybercrime during the pandemic, VPN technology came as a native answer to people’s requests to protect their online privacy, as by using an anonymous VPN service, the Internet traffic and data remain encrypted.

The military-grade encryption used in a VPN connection is almost unbreakable. Even if your ISP (Internet Service Provider) might recognize that you use a VPN, it won’t be able to track your final destination on the web.

Moreover, armed with a VPN, you can easily change your IP virtual location, get access to advanced security features (like Kill Switch), and you can fight against DPI, and bandwidth throttling.

The awesome part is that a VPN is compatible with the most popular operating systems (Windows, Android, Mac, iOS) and devices (Apple devices, smartphones, or Smart TVs), even on a VPN router. Therefore, enabling a VPN connection can be done whenever you want, wherever you are, with just a simple click or tap.

How does a VPN work?

To ensure a highly-secured internet connection, a new IP address, and complete anonymity in relation to your ISP, the VPN combines a series of components – a VPN server, a VPN protocol of your choice, and an encryption standard.

Anytime you decide to enable a VPN connection (no matter if you set it up manually or choose a VPN app aka VPN software to do the job), you are automatically connected to a VPN server. This server is located in a different country or region. At this point, you are assigned a brand-new IP address corresponding to your server’s location of choice. After this task is completed, the VPN server, helped by the VPN protocol and the encryption standard, encrypts your traffic and transports it to the desired destination on the web. The same principle applies when the response comes back to your device, meaning that your connection is encrypted from an end to another, back and forth.

Looking at things from our perspective of interest – the capability of a VPN to unblock a website -, we can easily conclude that this thing is made possible by the new IP address you receive. Therefore, if you’re located in Germany and want to access BBC iPlayer, you will need a VPN server located in the UK, as BBC iPlayer is available only in this country.

An important thing that you should keep in mind is that giant streaming services use advanced tracking and blocking algorithms for VPN detection. BBC iPlayer and Netflix are great examples of this practice. In such a case, the worst thing that may happen is that the service recognizes that you’re using a VPN, and it won’t grant you access to your account. In this situation, all you need to do is try again by using a different server and (possibly) a different browser or direct your attention to different solutions like Smart DNS or proxy.

VPN pros and cons.

What is Smart DNS?

Smart DNS, like its name suggests, is a smarter version of the DNS I was just telling you about. Smart DNS uses a server to help you spoof your location. This technique is specially developed to help internet users access geo-blocked content.

The Smart DNS proxy directs your traffic to a server, and only after this task is completed, it sends your request to the world-wide-web.

Just like the VPN, the Smart DNS service is also paid. Yet, compared to the VPN, Smart DNS does not hide your IP as it does not use a VPN server, and it does not encrypt your traffic, as it does not use a VPN protocol and an encryption standard.

Even so, the Smart DNS solution is doing a great job at tricking websites into seeing your location as an eligible one, granting you with a fast connection to enjoy your favorite streaming services like Netflix, BBC iPlayer, or Hulu.

How does Smart DNS work?

This sneaky technology that tricks a website into seeing your location as an eligible one, replaces your DNS address assigned by your ISP with a new one associated with the DNS server used for traffic routing. In order to do so, the technology uses a proxy server and a DNS server. This server can be located anywhere in the world and is provided by a Smart DNS provider.

The brand-new DNS address does not contain any information on your real geo-location. The smart and cool thing is that Smart DNS analyzes your request and replaces any information that may leak your location and, helped by the proxy server, is pointing to a location where the website you want to unblock is available.

This is how Smart DNS works magic on your location!

Smart DNS pros and cons.

Is Smart DNS the same as a proxy?

This is 100% a legit question to ask when it comes to Smart DNS and proxy.

In short terms, NO, Smart DNS is not a proxy, and it does not work like one.

The proxy technology uses a special proxy server to change your IP address and allow you to surf the web freely and anonymously. As this thing happens, websites won’t know your real identity. Compared to the VPN, the proxy does not offer encryption. On the other hand, Smart DNS does not change your IP address or encrypt your traffic. Yet, compared to the proxy, Smart DNS is able to unblock websites available in different countries, at the same time, as it won’t change your IP to a different location, since it only tricks websites by changing your DNS.

Smart DNS vs VPN. Is Smart DNS better than VPN?

Now that we know that DNS is a completely different thing, compared to the VPN and Smart DNS, let’s focus on the battle between these two similar but very different technologies.

Compared to a VPN (Virtual Private Network), the Smart DNS does not provide encrypted connections, and it does not change the IP address of the device in use. Instead, it changes the device’s DNS, providing access to restricted content.

Because the Smart DNS does not encrypt data, the connection between a website and a computer is much faster than the connection established through a VPN tunnel. Smart DNS is not a technology developed for online security and privacy purposes. For additional security, encryption, and advanced features, internet users should take into consideration using a VPN service.

Just how it happens in case of the comparison with a VPN, compared with a proxy, Smart DNS is way faster.

VPN vs DNS vs Smart DNS. FAQ on this subject

Let’s sum things up!

One thing is for sure. We cannot declare a clear winner of the VPN vs. DNS vs. Smart DNS war since this isn’t a battle. Each of the discussed technologies has its purpose.

If we reduce the whole discussion to a single thing – security – then yes, we have a winner – the VPN.

Therefore, it is really important to draw your online expectations.

If you look for advanced security, online freedom, and privacy, then you must use the VPN. On the other hand, if you want to surf fast, free (but unprotected), you should go for the Smart DNS. But, if you want to get access to both, you may subscribe to a VPN service that offers Smart DNS. Smart, isn’t it?

Last but not least, if you’re interested in VPN and VPN-related news, then you should consider subscribing to my newsletter by using the form below.

See you in your inbox! K?

VPN Gate is a free VPN solution used by millions of Internet enthusiasts. It was developed as an academic research project, and it has plenty of advantages. But is VPN Gate the perfect VPN solution? Let’s find out.

We do not (usually) recommend free VPN services due to security and privacy concerns. We believe that Internet users’ private data is far too important to be endangered by free VPNs (we explain here why, in more detail). However, we have chosen to present VPN Gate because it is an academic project. There are plenty of interesting details regarding the architecture and the technical solutions adopted for the implementation.

From the very beginning, it is necessary to underline that VPNGate is not an ordinary VPN service. This article takes a closer look at the VPNGate project, presents its advantages, explains the disadvantages, underlines the possible privacy and security issues, and shows how you may connect to the VPN Gate network.

The Transylvanian story of a gate to freedom

The life of bats is not simple in Castlevania. There is always a bigger bat that can make your life miserable.

From the beginning of winter, the MegaBats have started to close communication routes between the other colonies of bats. They were able to intercept the messengers and lock them down. Why were they doing that? Because they could. For some bats, this kind of motivation is enough. Sad, but true.

To every problem, there is a solution. GrandPaBat and the other bats from the Council of Elders have gathered to find a way out to these arbitrarily-imposed communication restrictions.

– My fellow bats, there must be a way to stop this abuse! We need to share news regarding food, shelter, or possible dangers between us, the regular bats! Our survival is at stake.

And, indeed, they found a way. They established to use Vlad’s castle as their safe harbor, their gate to freedom. When a group of bats would have something to share with the other bats, it should send a messenger, using a safe route (as far as the MegaBats as possible), to the castle. The messenger would entrust GrandPaBat and TomBat with the news and let them spread the knowledge to the other groups. No direct, unprotected communication between bat communities, lesser chances to lose important information.

Similar to the workaround found by the bats from Castlevania, VPN Gate represents a way to bypass censorship and keep the information private and secure.

And now, let’s find out how VPNGate works and how to use it!

What is VPN Gate and why was it created?

VPN Gate is an experimental project created at the University of Tsukuba that has the declared goal to expand the knowledge of “Global Distributed Public VPN Relay Servers” and to find better solutions for distributed VPN server systems.

VPNGate is a network of VPN servers provided by volunteers worldwide, a server network that uses the SoftEther VPN technology for encrypting data, routing traffic, and secure communication. The VPN Gate’s main purpose is to hide your IP address while browsing the Internet and help you benefit from the other VPN’s advantages. The usage of VPNGate is free, and no registration is needed.

The software running the VPN Gate server network is based on the SoftEther technology, and it was developed as a plug-in to extend SoftEther. Both projects (SoftEther and VPNGate) are operated at the University of Tsukuba, but it is important to mention that VPN Gate is not part of SoftEther.

How does VPN Gate work?

VPN Gate represents the infrastructure that allows servers to be added by volunteers. The architecture is based on the SoftEther technology and benefits from its advantages (performance, security, multiple protocols).

When a volunteer installs the SoftEther VPN server software on his Windows machine, the server is added to the public list, and it can be discovered by interested users.

When a VPN Gate user needs to connect to the network, he/she looks through the available servers listed, picks one, and directly connects to it (as presented below). No data traffic is passed through the VPNGate network, only between the user, the VPN server, and the Internet.

When to use the VPN Gate network?

VPN Gate is a totally free solution to connect to a VPN, hide your IP address, and encrypt your Internet traffic.

The VPN Gate is useful in certain scenarios to:

• Bypass governmental firewalls. The main goal of VPN Gate is to enhance Internet freedom. The SoftEther VPN protocol works on HTTPS, and it is especially difficult to be detected and blocked. Thus, it is ideal for bypassing firewalls of any type, including the Great Wall of China.
• Bypass geo-restrictions or ISP throttling. Some content (streaming channels, websites, forums, apps) is only available in certain countries or regions. By connecting to a VPNGate server from the country with access to the content, you may enjoy an awesome online experience without any restrictions.

However, before you start using it, make sure you read the disadvantages and the security concerns.

Advantages and disadvantages of VPN Gate

Like any other VPN solution, VPN Gate has pros and cons. I will list them below to help you decide whether VPN Gate is suitable for you or not.

Advantages of using VPN Gate

VPN Gate is free, but this is not the only advantage it has:

• It is open source.
• It is part of a research project backed up by a prestigious university.
• There is an important community that sustains the project.
• The network consists of more than 17,000 servers (only several hundred are listed at any given time, for security reasons).
• Servers are not placed in data centers, and they are harder to be blocked based on IP ranges.
• It provides access to several VPN protocols with high encryption (256-bit): SoftEther, OpenVPN, IPSec, SSTP.
• Many servers use the SoftEther protocol, which is very safe, fast, and stealthy.
• Some servers can unblock streaming channels like Netflix, BBC player, etc.
• Some VPN servers allow torrent traffic.
• You benefit from unlimited server and country switching.
• It can be configured on most devices, including routers.
• There are no IP leaks.

Disadvantages of using VPN Gate

Even though the list of advantages is impressive, the VPN Gate network has its drawbacks:

• It is too complicated for the average Internet user.
• Many servers provide slow speed as they are basic computers located in residential areas.
• The connectivity and overall performance are unstable.
• On mobile devices (iPhone, iPad, Android), you may not connect using the SoftEther protocol.
• It may be difficult to find a certain location or country since only a small part of the network is listed.
• The general logging policy of the network is that servers keep logs for two weeks. You may check specific logging settings for each server in the server list.
• Servers offered by volunteers may serve you ads (as some users have reported).

Is VPN Gate trustworthy? Privacy and security concerns

VPN Gate looks excellent from many angles: it is free, it was created and it is maintained by an academic institution, it is open source. But, should you completely trust it with your private data? I say you would rather not.

VPN Gate was created primarily as a research project to help those in need of bypassing governmental censorship. And for that it is great! You will probably not find a better free tool.

The weak spot of VPNGate is the fact that volunteers provide the servers. Even though VPN Gate’s technology seems secure both for the user and the volunteer, there are still concerns about the way server owners manage users’ data. For example, volunteers may have access to connection and usage logs. Are you comfortable with the thought that someone you don’t know and is not restrained by any regulation has access to such data?

Additionally, as stated on the website, the VPN Gate team may hand in your activities’ logged data if requested by official authorities.

Thus, if your data and activities’ privacy is important to you, my advice is to choose a premium VPN service, such as NordVPN, ExpressVPN, Surfshark, or Mullvad. They are better to keep your Internet traffic data safe and maintain your privacy than some volunteers from random locations around the globe.

VPN Gate vs. free VPN

VPN Gate is free, but there are clear distinctions to free VPNs.

Most (if not all) free VPNs have the goal to make money, but they do not charge you directly, unlike commercial VPNs. Free VPNs are monetizing their users either through showing ads or by selling their data. That is why we do NOT recommend free VPN solutions.

VPN Gate defines a generic infrastructure that is regulated by the team at the University of Tsukuba. VPN servers are exposed to the network by volunteers, free of charge, of course, with the only declared goal to help the project research and help those in need for bypassing various restrictions or government’s firewalls.

Still, my advice is to use VPNGate cautiously and only when you can not afford to get a paid VPN or don’t have a better alternative. There is still a possibility that a VPN server may be corrupted and get your data traffic exposed.

How to set up VPN Gate on your devices

There are several ways to connect to a VPN Gate server and there are two aspects that you need to take into consideration:

• the VPN protocols that are exposed by a VPN Gate server;
• the operating system of the device you want to connect from.

The steps to connect to a VPN Gate servers are:

1. Open the VPN Gate Public VPN Relay Server list (www.vpngate.net) and choose a VPN server from any location you want (you may select the server taking into account the scoring that is related to the overall performance of the server);
2. Check the protocols shown by the desired server (SoftEther/SSL-VPN, OpenVPN, MS-SSTP, L2TP/IPSec);
3. Choose the protocol suitable for the device you want to connect to the VPN server (check the table below);
4. Download and install any app that you need to connect (the SoftEther client, the OpenVPN app);
5. Fill in the VPN connection properties (server hostname or IP address, port number, type of connection: UDP or TCP for OpenVPN or SoftEther, username and password). For all servers, usernames and passwords are “vpn“.
6. Connect to the server (no registration is needed).

And here are the protocols suitable for the most popular operating systems (devices):

Thus, for Windows, you may install the official SoftEther VPN client and connect using the SSL VPN protocol. There is also a VPN Gate Client plugin that integrates with the SoftEther app and initiates the VPN Gate connection with a click.

You may also connect from the built-in VPN clients available on Windows with Microsoft SSTP or L2TP/IPSec. OpenVPN is also an option by installing the OpenVPN client app.

On Linux, all options are available, with the limitation that, for SSTP, you need to install an SSTP library.

On Mac, there are options to connect to a SoftEther VPN server, and I have described them in detail here. Using the SoftEther protocol is possible but does not always work as it depends on a third-party, outdated app.

On mobile devices (iOS, Android), SSL VPN and SSTP are not available, but you may connect using L2TP/IPSec (with the built-in VPN client) or OpenVPN (by downloading the official OpenVPN client app).

Several tutorials on how to access VPN Gate are available on the official website.

How to install a VPN Gate server on your computer

Would you like to help others bypass Internet censorship? Then, you may consider sharing your Internet connection and become a volunteer in the VPN Gate network.

You need a Windows computer. Then you have to install the SoftEther VPN server, activate and configure the VPN Gate service, and (optionally) enable L2TP/IPsec VPN for your guests.

I strongly recommend you carefully read what the installation of the VPN Gate server on your computer involves. You may find all the details and installation info here.

VPN Gate FAQ

Conclusion. Should you use VPN Gate?

VPNGate, the Japanese academic project, is a solid VPN solution, ideal for bypassing Internet censorship and unblocking restricted websites. It may be a valuable tool for Internet users from countries where free Internet access is restricted, for activists or journalists.

However, it may be complicated to set it up, find a fast server, and change VPN locations. Additionally, the fact that VPN servers are exposed and controlled by anonymous volunteers may be a deal-breaker.

Should you use it? My advice is to connect to VPN Gate only when you have no choice, when you can not afford to subscribe to a premium VPN service, or when you cannot solve your problem with a premium VPN. Top VPN providers offer access to friendly apps, plenty of servers, access to advanced security options (Kill Switch, split tunneling), or fancy server options (obfuscated servers, Double VPN, Onion over VPN, Shadowsocks).

You have reached the final of our article on VPN Gate. Please subscribe to our newsletter (below), and we promise to keep you updated with news and tutorials on SoftEther and VPN Gate. Plus, you will make a Transylvanian baby-bat very happy.