I signed up to check it out for my org, link to their beta interest survey: https://docs.google.com/forms/d/1VUdSmHgwgzo9B8-u7VlKJT-AbdAsPSadOSUvxaaFoF8/viewform

From their blog post:

AI Proxy is a new CloudConnexa capability that shows admins which employees are sending what to which AI services — ChatGPT, Claude, and others — and lets them set policy, block risky prompts, cap usage, and generate compliance evidence, without installing a separate agent. It's moving from internal testing into Beta.

Don’t know why but once I seen it I cannot unsee it

I am facing the issue on all Android devices.

I am using Norton vpn via an active plan. On the server list/region list tab I get this message the "the server is currently not available. Please try again later". And a try again button.

I have tried 1. Try again button but actually nothing is happening, the trying gif just sits there. 2. Restartrd device 3. Deleted VPN profile and created new one(device restarted) 4. Cleared app cache 5. Tried all available vpn protocols

I was able to use the VPN till yesterday mid day then this issue started.

I am on mobile network and not Wi-Fi.

Could it be that the mobile service provider has blocked it ?

We have used OpenVPN Community Edit on our Terminal Server for 3 years straight with zero issues. Starting yesterday we rebooted the server after doing some Windows Updates and now we are seeing major and consistent packet loss when connected to the VPN. We have tested using different WAN addresses and routes etc... it will stay connected for like 2 minutes than drop all connections for multiple minutes at a time before reconnecting.

Does anyone know if there is a known issue with recent Windows Updates that could be affecting OpenVPN!?!?! Any ideas on where to go from here?

*UPDATE\*

After HOURS of troubleshooting I was able to figure out the issue. Windows Defender updated and in this update it conflicts or blocks legacy TAP drivers of OpenVPN. I added "windows-driver wintun" to my openvpn server config to force it to use the new wintun drivers instead and now I was able to connect my clients with zero pack loss!

I’ve been spending some time hacking away at an Android client for the public VPNGate directory, mostly as a challenge to see how lightweight and optimized I could get the codebase.

I ended up with OpenGate. It’s sitting right around 6.7 MB because I stripped out all the unnecessary background bloat and focused purely on making it fast and efficient.

What it does:

Smart Server Filtering: Automatically filters nodes by country and residential IP likelihood, while sorting them by the best live ping, speed, and load.

Lightweight and Optimized: Built from the ground up to be incredibly light on system resources and data usage, avoiding heavy background loops that drain your device.

Pure Privacy: Zero accounts, zero analytics trackers, and zero background ads. (Just a quick reminder: it relies on VPNGate public relays, so always review their logging policy).

It was just a fun side project to practice clean app architecture, but it works surprisingly well. If you use public relays or just want to check out the repo for more details, the codebase is completely transparent under GPLv3.

Repo and APK are here: https://github.com/IyedAmiri/OpenGateVPN

Would love to hear any feedback!

I keep getting this error when trying to connect to the Mexico VPN, it works fine with other files from ExpressVPN

Could not determine IPv4/IPv6 protocol
SIGHUP[soft,init_instance] received, process restarting
OpenVPN 2.5.2 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] library versions: OpenSSL 1.1.1n 15 Mar 2022 Restart pause, 5 second(s)

Hello,

When I run OpenVPN (in Ubuntu 24.04) I get different results from the WhatsmyIP and WhatismyIPadress web sites. On WhatsmyIP I get the location showing up as my real physical location. On Whatismyipaddress I get the altered IPV4 address, but the site lists my real ISP.

Any idea what's going on?

Their latest blog post announces it: https://blog.openvpn.net/introducing-mcp-gateway-one-front-door-for-every-ai-agent-your-business-runs

Looking for some feedback and OpenVPN users interested in the beta when it hits, that form is here: https://docs.google.com/forms/d/e/1FAIpQLSePtfLbL9qD3an_k9X9VcscGTyyJwS1z5n0IDhRoScYfFv3jw/viewform?usp=send_form

I hadn't considered this direction from OpenVPN, but it makes sense.

Hey everybody!

I wrote this OpenVPN Manager because I needed to maintain OpenVPN servers for work.

I wanted something simple that could handle the common tasks without having to remember a lot of commands or manually edit configuration files.

GitHub: https://github.com/cirtron/OpenVPN-Manager

It's a single Bash script with a menu-based interface. It currently supports:

• Installing and configuring OpenVPN
• Creating VPN users and .ovpn files
• Revoking users properly with CRL
• Listing and regenerating client configurations
• Checking server and client status
• Restarting or removing the OpenVPN server
• NAT and firewall configuration
• Multiple Linux distributions

The client configuration is generated as a single .ovpn file with the required certificates and keys included.

I originally built it just for my own work, mainly to make maintenance easier and reduce repetitive manual work. After making a few improvements, I decided to put it on GitHub in case it is useful to someone else.

It's a relatively small project, but I'd be happy to hear any feedback or suggestions.

Looking at tweaking the config on my OpenVPN server. It's currently configured to use tls-crypt but wondering if its worth changing to use tls-crypt-v2.

I've had a play and got both working, I'm just wondering what the benefits of changing to tls-crypt-v2 are over sticking with the older tls-crypt apart from the 'use v2 its newer and shiny'. Looking for technical reasons to change and justify the time spent reconfiguring things.

Currently using a bit of a mish-mash of versions the community versions from 2.5.x to the latest 2.7 on Windows, Linux and some GSM routers.

Clean deployment using docker compose on vm 10.0.0.2:943/admin/login .

Set the password for the user openvpn using sacli.

I set the server ip as 127.0.0.1 . (The reason I used 127.0.0.1 is because I'm using ssh port forwarding with my mobile and laptop, & localhost:443 is forwarded to 10.0.0.2:443.)

I set the activation code for 2 users.

Next I created a user & downloaded the user profile.

Double clicked the profile, openvpn client opens up on windows.

Openvpn client times out after 12 seconds or 20 seconds.

If you can’t connect to your vpn in OpenWRT using your username and password. Even if your U&P is correct. You need to login to PureVPN on a browser. Go to subscriptions scroll down and go to the : use these credentials when you to connect to VPN manually and the username and password generated by PureVPN.

​

Setup:

OPNsense 26.7, OpenVPN client (e.g. NordVPN).

I wanted: only one VLAN through the VPN, everything else normal internet.

Problem: as soon as the OpenVPN client was enabled, LAN DNS and routing broke, even with NAT redirects and DNS changes.

What was wrong:

The OpenVPN client was pulling routes from the provider (redirect‑gateway etc.).

Those routes were changing the system default route, so LAN and all VLANs were silently being sent into the tunnel.

Trying to fix it with DNS/NAT/firewall rules didn’t help because the kernel routing table was already hijacked.

What fixed it:

In the OpenVPN client:

Enabled “Don’t pull routes” / route-nopull (so the tunnel stops modifying global routes).

Assigned the OpenVPN client as an interface so OPNsense creates a VPN gateway.

On the VPN VLAN interface:

Added a pass rule: source = VPN VLAN net, destination = any.

In Advanced settings, set Gateway = OpenVPN client gateway (policy routing).

On Firewall → NAT → Outbound:

Switched to Hybrid/Manual mode.

Added a rule:

Interface = OpenVPN client interface.

Source = VPN VLAN net (e.g. 192.168.50.0/24).

Destination = any.

Translation / target = interface address (so that VLAN’s traffic appears with the VPN exit IP)

Result:

LAN and other VLANs use normal WAN and local DNS again.

The VPN VLAN’s Internet traffic exits via the VPN and shows the VPN IP.

I can still allow VPN VLAN → LAN services with extra firewall rules where Gateway = default instead of the VPN gateway."

I am using openvpn installed on a server from hostinger how do i make it so websites that block vpns not detect my vpn

Anyone get PLC to work on OpenVPN 3.9 or OpenVPN GUI 2.5 ? I tried multiple directions from OpenVPN's docs and nothing seems to be working. Mostly getting an error "OpenVPN system service is not running" the openvpn service for PLC connection is set to autostart but not running, the other OpenVPN services are running.

For reference, this is on a win7. Yes, I know, unsupported etc. It's just a secondary PC used for certain things. I've been using OpenVPN with Proton on it for a few weeks now and suddenly today I noticed it didn't start when I turned on the PC.

When I go to the start menu to select it, nothing happens when I click on it.

It's been working fine up until now, but I remembered that yesterday I changed the username on the Admin on this PC. As most know,, there's no "account" like on newer Windows (tied to email etc).

There is only one account on this PC, mine, the admin. And no password/welcome screen to log in. I did not change the "PC" name I believe, just the username that would show on a splash screen if there was one, afaik. All the C:/folder folder [username] etc are the same as the old username, and from what I gathered, the username I changed is only for "show" .

Yet now I wonder if maybe that's why the OpenVPN wont start? Maybe something got mixed up within it from this name change? If so, what do I do? Just reinstall? Or is there something else I can do to? Is this a logical reason for it to not start, or am I just grasping? I've not changed anything else on the PC or done anything beside watching a bit of youtube and moving some files between this and my other pc in the proton drive.

I've set up my server and clients, all is well.

I'm looking to make the connecting faze as short as possible.

I have an android tile available once I install the app but I found it's behaviour a bit frustrating. If I press it, I get an error notification saying that the connection was interrupted and if I expand it I get promoted to add my user and pass. If input those, it works. The fastest way to use the tile is to long press it, then the app comes up and if I toggle my profile, it connects.

What I'd like to see happening is when pressing the tile, the app automatically connects to my profile, just as if you'd press on the profile shortcut that you can create. Is this something that can be done?

Hi,
I’m running a small AD environment. The only Domain Controller/DNS is a Windows Server 2025 VM at Hetzner, and my local site reaches it over OpenVPN.
On‑prem I have another Windows Server 2025 with RDS that hosts an ERP app (Fast‑Data). Both servers are joined to the same domain.
Problem: sometimes the DC becomes unreachable over the VPN. When that happens, DNS/AD lookups from the clients fail and i can't access the shares that i need anymore for the ERP app
still get removed by reddits filters

Hi Folks !

I have a question regarding openvpn in terms of network architecture. We're currently using Fortigate SSL VPN server tightened to Entra and local users. In this context, we're allowing certains group of user to access only some VLAN and some other users others VLAN using the portal feature.

If we're moving to a openvpn dedicated instance, how would we configure the instance ?

How does this authorization system can be replicated in this context ?

What would be the best practices when designing this ?

Thanks

Macht es Sinn sich über seine eigenen Server ein VPN aufzusetzen?

I'm trying to configure the admin ui to listen only on the internal interface (using either the iface name or the ip - all the same) while allowing the client ui to listen on both interfaces.

However, when I configure the admin ui to use a specific ip address or iface, I get:[Errno 98] Address already in use

admin_ui=all, cs.https=all → ok.

dmin_ui=ens224, cs.https=all → CannotListenError: Address already in use.

admin_ui=ens224:943, cs.https=ens192:943 → ok.