What is OpenVPN and what does it have to do with your VPN

Good to Know: SSL VPN stands for Secure Sockets Layer Virtual Private Network, and is a security technology used for encrypting network communications.

What is OpenVPN?

The world’s most trusted cybersecurity service provider

If you type “What is OpenVPN?” into a search engine the results might lead you to believe it’s strictly an open source project. Yes, it is that, but it’s not only that. The more accurate answer is that OpenVPN is the name of:

• An open source project we call Community Edition.
• Our tunneling protocol.
• The company behind this site and the commercial products we make to support the open source work .

OpenVPN Community Edition (Open Source)

The OpenVPN Community Edition (CE) is an open source Virtual Private Network (VPN) project. It creates secure connections over the Internet using a custom security protocol that utilizes SSL/TLS. This community-supported OSS (Open Source Software) project, using a GPL license, is supported by many OpenVPN Inc. developers and contributors as well as the extended OpenVPN community. CE is free to deploy, but it does require a strong understanding of Linux and using the command line interface.

OpenVPN Tunneling Protocol

The OpenVPN tunneling protocol uses the Secure Socket Layer (SSL) encryption protocol to ensure data shared via the Internet remains private using AES-256 encryption. Because the code is available for audits, anyone can find — and fix — vulnerabilities. It’s not only considered the most secure VPN tunneling protocol, it also delivers faster connections and can bypass most firewalls.

Additional benefits include:

• Any IP subnetwork or virtual ethernet adapter over a single UDP (user datagram protocol) or TCP (transmission control protocol) port.
• Networks whose public endpoints are dynamic such as DHCP or dial-in clients.
• Networks through connection-oriented stateful firewalls without having to use explicit firewall rules.
• Networks over NAT (network address translation).

• All of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic from bad actors and ISPs as it transits the internet.
• Any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library.
• Static, pre-shared keys or TLS-based dynamic key exchange
• Real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization.

• Configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients.
• Choose between static-key based conventional encryption or certificate-based public key encryption.
• Create secure ethernet bridges using virtual tap devices.
• Control OpenVPN using a GUI on Windows or macOS.

OpenVPN Cloud reduces the complexity and high cost of building and managing a company-wide secure network. Built on the open source OpenVPN protocol, OpenVPN Cloud provides the foundation for evolving security initiatives like ZTNA and SASE. That’s why the world’s most renowned brands use OpenVPN to eliminate vulnerabilities and keep hackers out of their networks.

Recommended Reading: Not sure how to choose the best VPN service? Here are some recommendations .

Cybersecurity has evolved. Legacy systems cobbled together routers, switches, firewalls, and other gateways. And non-cloud VPNs are limited in terms of security, scalability, and flexibility. Built on the proven OpenVPN protocol , OpenVPN Cloud combines:

• Secure remote access
• End-to-end AES 256-bit encryption
• Advanced IP address and domain routing
• Intrusion detection and intrusion prevention systems
• DNS-based content filtering

Good to Know: OpenVPN Connect, the OpenVPN client software, works with Microsoft Windows, MacOS, Linux, Android, and iOS. It also includes a Kill Switch feature so users don’t have to worry about leakage, or man-in-the-middle DNS attacks, when VPN connections drop while working on public WiFi.

With OpenVPN users can tunnel:

• Any IP subnetwork or virtual ethernet adapter over a single UDP (user datagram protocol) or TCP (transmission control protocol) port
• Networks whose public endpoints are dynamic such as DHCP or dial-in clients
• Networks through connection-oriented stateful firewalls without having to use explicit firewall rules
• Networks over NAT

Good to Know: OpenVPN Cloud uses the OpenVPN tunneling protocol rather than IPSec, L2TP, PPTP, SSTP, SSL and TLS (SSL/TLS), IKEv2, or SSH security protocols.

Built with network administrators and end-users in mind, OpenVPN supports:

• All of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic from bad actors and ISPs as it transits the internet
• Any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library
• Static, pre-shared keys or TLS-based dynamic key exchange
• Real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization

For functionality, flexibility, and scalability, OpenVPN makes is easy to:

• Configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients
• Choose between static-key based conventional encryption or certificate-based public key encryption
• Create secure ethernet bridges using virtual tap devices
• Control OpenVPN using a GUI on Windows or Mac OS X

Good to Know: SSL VPN stands for Secure Sockets Layer Virtual Private Network, and is a security technology used for encrypting network communications.

Remote and hybrid workforces are the new norm. Only OpenVPN delivers the security features and ease-of-use that both administrators and employees need.

OpenVPN is on a mission to make cloud-based security accessible to businesses of all sizes. Get started with OpenVPN Cloud or OpenVPN Access Server for free, and tap into our flexible, economical pricing as your business needs evolve.

What is OpenVPN and what does it have to do with your VPN?

If you are googling around for VPN (Virtual Private Network) apps, you will likely come across the term “ OpenVPN .” And if you’re a Surfshark user (hi!), you may have noticed it under the “Protocol” tab. But what is OpenVPN? The answer is a bit complicated, so I dedicated this whole article to explaining it.

Table of contents

Identity protection
with Surfshark Alert
Get real-time email, credit card, & ID breach alerts
With a 30-day money-back guarantee

What is OpenVPN?

OpenVPN can refer to two things:

A secure VPN protocol

VPN “protocol” is a fast way of saying “a collection of procedures, rules, and things that allow a device to do a task.” In this case, the OpenVPN protocol defines a way to set up a VPN connection.

A VPN software
OpenVPN, as software, is an application that helps to set up a VPN server/network by yourself.

Created in 2001, the OpenVPN protocol is now used by almost every VPN provider. This is largely thanks to its open-source nature, which lets users check the code themselves. Transparency has led to a lot of testing, proving that the protocol is reliable and secure.

If you’re not a fan of technical mumbo-jumbo, let me give you the barebones explanation of what you need to know:

You can encounter OpenVPN as a:

• Protocol (usually implemented into other apps by VPN providers);
• Software (comes with its own app that allows you to connect to servers from other VPN providers).

For a regular home user, the important part is that OpenVPN is one of the VPN protocols you’re most likely to encounter . As mentioned before, Surfshark uses OpenVPN as one of the options when it comes to securing your connection.

How does OpenVPN work as a VPN protocol?

The OpenVPN protocol combines rules for encrypting data, procedures for creating a secure connection, and things like different transport modes. Some of those already existed, and others were developed specifically for OpenVPN.

The encryption OpenVPN provides

As a security and privacy tool, a VPN is nothing without encryption. For that, OpenVPN uses the OpenSSL library.

What’s that? It’s an open-source cryptography library that provides the protocol with ways to encrypt and decrypt data. Encryption turns the data you send and receive into unreadable junk. This makes it useless to anyone who might spy on the communication between the VPN app and the server. OpenSSL is considered to be very reliable, and it’s used all over the internet.

OpenVPN utilizes 256-bit encryption ciphers provided by OpenSSL, such as AES-256-GCM, that Surfshark runs . Bluntly speaking, the more bits in a cipher, the more secure it is. For example, 256-bit AES transforms your data 14 times before transmitting it over the internet. This makes it quite infeasible to crack with modern computers.

What are the security and speeds of OpenVPN?

And yet, the OpenVPN project spiced up the security level even further. It uses a custom security protocol – yes, protocols can have protocols in them – instead of employing an existing one like IPSec. As it’s based on TLS and SSL (Transport Layer Security and its deprecated predecessor, Secure Sockets Layer), it works according to widely accepted standards.

Generally speaking, OpenVPN is not the fastest protocol around. This has a lot to do with implementing OpenVPN on the server side. It’s clunky, with many added features, sporting a code no shorter than 70,000 lines.

Also, it’s more difficult to scale than its competitors, WireGuard and IKEv2/IPSec. This often leads OpenVPN to performance issues because it constantly gets adjusted with infrastructure updates.

The two modes OpenVPN offers

On the more user-oriented and less head-ache-inducing side, OpenVPN operates in two modes: OpenVPN UDP (User Datagram Protocol) and OpenVPN TCP (Transmission Control Protocol). Those are two of the bedrock protocols (yes) of the internet. In fact, you can choose which mode to use with Surfshark!

Why? Because TCP sends and receives data packages all while keeping the computer equivalent of direct eye contact with the recipient. On the other hand, UDP is faster as it sort of just labels the packages and chucks them at the recipient.

So now you know about the OpenVPN protocol. But what about OpenVPN as software?

How does OpenVPN work as VPN software?

As I mentioned, OpenVPN isn’t just a protocol. It’s also a tool for creating and maintaining virtual private networks. You are most likely to run into the OpenVPN GUI (graphical user interface) app, which allows you to connect to a VPN server from your VPN provider… and that’s about it. It is really barebones and lacks a lot of quality-of-life improvements that you’d find in a dedicated VPN client like Surfshark.

OpenVPN: pros and cons

You’ve looked through a lot of explanations. Now let me put it simply. What will you get, and what will you sacrifice if you use OpenVPN?

OpenVPN’s pros
OpenVPN’s cons
Better security
Slower speed
Strong encryption
Manual setup
Reliable connection
May require 3rd party applications

If the pros outweigh the cons for you, let’s see how you can use it!

What can OpenVPN be used for?

As a protocol:

When implemented as a protocol, OpenVPN is great at protecting your entire device. It offers good speed and strong security and can be used with industry-leading encryption. It’s also one of the most commonly used protocols for router setups.

As software:

Some systems may be too old to run good VPN apps, but they can run OpenVPN software. Therefore, OpenVPN is a good alternative when you want to protect an older device.

On top of that, OpenVPN software is a great way to bypass network restrictions where VPN providers are blocked. Be it your work network that blocks VPN service downloads or country-wide firewalls like the Great Firewall of China that blocks access to VPN pages altogether .

Can I set up OpenVPN on my device? Yes!

So let’s say you want to connect to a VPN server using the OpenVPN client. If you’re using Surfshark, we have guides for that!

With Surfshark, you can also always download our app instead and use OpenVPN that way. But in case you want to take the scenic route of configuring OpenVPN yourself, here are the guides:

OpenVPN vs. other VPN protocols

People always want to know what’s best . But it is difficult to compare VPN protocols. Why? Aside from flaws in code, a VPN protocol’s speed and security depend on its implementation.

Because of this, I recommend you try each of the protocols out yourself before making any conclusions .

However, this is (on average) how VPN protocols stack up against each other:

Encryption
Industry-leading
None unless paired with IPSec
Industry-leading
Industry-leading
Shadowsocks

OpenVPN vs. PPTP

Point-to-Point Tunneling Protocol, developed by Microsoft and others in 1999, is basically everywhere. It is also widely regarded as insecure, obsolete, and compromised by the NSA . Aside from the fact that it uses 128-bit encryption in the 256-bit era (imagine the key to your home having a single incision instead of five), there are at least five major ways to overcome PPTP encryption, making it very easy for hackers to read your data.

The verdict: OpenVPN is more secure than PPTP in basically every way . Sure, PPTP is faster, but it comes at the cost of weaker encryption.

OpenVPN vs. L2TP

Layer 2 Tunneling Protocol was developed around the same time as PPTP. As a tunneling protocol, it doesn’t encrypt data by itself, so it’s usually paired with IPSec. This sort of modularity allows it to utilize AES encryption.

Like PPTP, it’s basically everywhere. However, there are rumors that it is compromised by the NSA.

The verdict : OpenVPN is safer by default and does not have issues with firewalls like L2TP often does.

OpenVPN vs. IKEv2

Sometimes called IKEv2/IPSec due to the usual pairing of the two, Internet Key Exchange v2 was developed by Cisco and Microsoft, but it also has many open-source versions.

IKEv2 is a good choice for mobile users as it handles network drops (like walking out of Wi-Fi range and hopping onto mobile data) and is a bit faster than OpenVPN. Yes, this applies to Surfshark users as well.

The verdict : IKEv2 works better for most users than OpenVPN.

OpenVPN vs. SSTP

SSTP can be seen as Microsoft creating a fitting replacement for PPTP. And it works! SSTP is integrated with all Windows systems going back to Windows Vista and offers a comparable level of service as OpenVPN.

So why use OpenVPN? Because it’s open-source. This means that tech experts around the world can pop the hood up at any time and inspect the code. SSTP isn’t open-source, so you’d have to trust Microsoft to use it.

The verdict : OpenVPN is more trustworthy and, therefore, better suited for people worried about their privacy.

OpenVPN vs. WireGuard

WireGuard® is one of the newest kids on the block, in development since 2016. One of its great advantages is its size. Wireguard clocks in at about 4,000 lines of code compared to 600,000 for OpenVPN or 400,000 for IPSec . Fewer lines mean the code is easier to inspect, and there are fewer places for bugs to pop up.

The verdict : WireGuard* is fast and secure – you should probably use it instead of OpenVPN. That’s why Surfshark VPN updates automatically and switches the protocol to WireGuard (you can switch back manually, of course).

*WireGuard is a registered trademark of Jason A. Donenfeld.

OpenVPN vs. Shadowsocks

Shadowsocks is a free, open-source encryption protocol project. It’s based on the SOCKS5 proxy – that is, the 5th version of the SOCKS protocol for routing your traffic via a proxy. While proxies give you one of the VPNs’ benefits – getting a new IP – they’re not encrypted.

Shadowsocks was designed to provide that encryption because it was made for one goal: to circumvent the Great Chinese Firewall and allow Chinese users to reach the wider internet safely. However, it’s not the most well-crafted protocol, and it’s not easy to implement.

The verdict : Users not connecting from China are better off with OpenVPN. Users in China can still benefit from our NoBorders feature , which the app enables automatically.

Can I use OpenVPN for free?

Technically speaking, yes, you can use OpenVPN for free. You can, say, use the Community Edition to create your own OpenVPN server on your home computer and then use the GUI app to connect to that server from your phone.

That way, you will have a safe communication channel to your home, but not much else. You won’t be hiding your IP, bypassing censorship, or unlocking streaming libraries.

If you want these benefits, you need to subscribe to a VPN provider like Surfshark. At that point, you also get access to an app that lets you switch servers without downloading anything and contains features like No Borders and Kill Switch.

Is OpenVPN safe to use?

Yes , previous inspections and audits have revealed some flaws in OpenVPN’s security , but OpenVPN developers immediately patched them. Moreover, the project maintains a log of discovered issues outlining their solutions.

In summary, do I need OpenVPN?

Are you using a VPN to increase your privacy and security while surfing the web and get better access to entertainment? And is your device supported by a VPN client like Surfshark? If so, you don’t need to engage with OpenVPN yourself, aside from setting it as your preferred protocol on the app.

If you’re a business setting up a VPN server or a really dedicated hobbyist who wants to set up a VPN at home, then you may want to use OpenVPN software. You may also use OpenVPN to access VPNs like Surfshark on platforms that the client app itself doesn’t support.

Additionally, OpenVPN is useful when installing a VPN on a router to secure all connected devices simultaneously.

So unless you find yourself in one of these specific situations, getting an all-included app like Surfshark is the way to go.

Yes, Surfshark supports OpenVPN!

FAQ

Can I use OpenVPN with Surfshark?

Yes, you can use the OpenVPN protocol with Surfshark. Once you have Surfshark’s app, follow these steps to turn on the protocol:

• Open the app and go into Settings ;
• Click on VPN settings and follow that up with picking the Protocol option;
• In the drop-down menu, there are OpenVPN (UDP) and OpenVPN (TCP) – choose the one you prefer more. TCP is slower but more reliable when transferring data, and UDP is faster, but the data transfer is not guaranteed.

Is OpenVPN safe to use?

Yes, OpenVPN is safe. It uses the OpenSSL library, which opens up a communication tunnel between you and the server you’re visiting, AND uses high-level encryption based on a combo of symmetric and asymmetric key algorithms. It makes it safe by establishing a direct way for data to travel.

What is the difference between VPN and OpenVPN?

Modern VPNs use Wireguard, which is the faster protocol, whereas OpenVPN doesn’t. Both offer a similar level of security, but OpenVPN’s encryption can be set to a lower level – from 256-bit to 128-bit.