Open Source VPN options

vpn-options.md

• Amnezia VPN (OpenVPN & WireGuard protocols) - Windows, MacOS, iOS, Android, Linux (no ARM support)
• boringproxy (in-house developed "NameDrop" protocol) - Windows, MacOS, Linux, FreeBSD, OpenBSD
• boringtun (WireGuard protocol) - MacOS, Linux (mobile clients not open source)
• Brook (in-house developed "Brook" protocol as well as WebSocket Secure, SOCKS5, and QUIC protocols) - Windows, MacOS, Linux, OpenWrt (mobile clients not open source)
• Chisel (SSH protocol) - Windows, MacOS, Linux
• cjdns (in-house developed "CryptoAuth" protocol) - Windows, MacOS, Linux, FreeBSD, NetBSD
• Cloak (OpenVPN & Shadowsocks protocols) - Windows, MacOS, Linux
• Crowbar (OpenVPN + SSH protocols) - Windows, MacOS, Linux, FreeBSD, OpenBSD
• DSVPN (TCP) - no binaries; can compile for MacOS, Linux, OpenBSD, DragonFly BSD, FreeBSD, NetBSD
• EdgeVPN (TCP) - Windows, MacOS, Linux, FreeBSD
• EdgeVPNio (evio) (WebRTC) - only binary is Debian/Ubuntu deb repo; can compile for Linux
• eduVPN (OpenVPN protocol) - Windows, MacOS, iOS, Android, Linux
• fastd (UDP) - MacOS, Linux, FreeBSD, OpenBSD (Android exists in code but unmaintained since 2020)
• Firewalla (OpenVPN, WireGuard, AnyConnect SSL) - hardware-specific binary images; mobile clients not open source
• Firezone (WireGuard) - no binaries; can compile for Linux (other platforms on their roadmap)
• Global Socket (TCP) - only binary is Debian/Ubuntu deb file; can compile for MacOS, Linux, FreeBSD, Solaris
• GNUnet (TCP) - Linux
• GreenTunnel (SOCKS5 protocol) - Windows, MacOS, iOS
• HevSocks5Tunnel (SOCKS5 protocol) - can compile for MacOS, Android, iOS, Linux, FreeBSD
• Husarnet (UDP with TCP fallback) - Windows and Linux, MacOS in alpha (website says "Android coming soon")
• Hyprspace (TCP protocol) - Windows, MacOS, Linux (discontinued)
• Hysteria (in-house protocol based on QUIC) - Windows, MacOS, Linux
• i2pd (Invisible Internet Protocol I2P) - Windows, MacOS, iOS, Android, Linux, FreeBSD (designed to access darkweb services and p2p applications; can be used to proxy regular Internet but they recommend Tor for that)
• Iodine (DNS protocol) - Linux, FreeBSD, OpenBSD, NetBSD (also Windows and MacOS with third-party drivers)
• IVPN (WireGuard and OpenVPN protocols) - Windows, MacOS, iOS, Android, Linux (commercial service)
• Ki4a (SSH protocol) - Android
• Kilo (WireGuard protocol) - Linux (requires Kubernetes)
• kytan (UDP) - MacOS (client only), Linux
• Lantern (UDP) - Windows, MacOS, iOS, Android, Linux (switched to closed source; see archive directory; neither Lantern Free nor Lantern Pro support customized server location)
• Lightway Laser (in-house developed "Lightway Core" protocol) - Linux
• Lokinet (in-house developed "LLARP" protocol) - Windows, MacOS, Linux (Android & iOS builds are broken)
• MASQ (Gossip protocol) - Windows, MacOS, Linux (CI builds; freemium service)
• Meshbird (in-house developed "meshbird" protocol) - MacOS, Linux (no ARM support)
• Mysterium (WireGuard protocol) - Windows, MacOS, Android, Linux (commercial service)
• Mullvad (OpenVPN & WireGuard protocols) - Windows, MacOS, iOS, Android, Linux (commercial service)
• n2n (in-house developed "n2n" protocol) - Linux; can compile for Windows, MacOS, Android
• Nebula / Mobile Nebula (Noise protocol) - Windows, MacOS, iOS, Android, Linux, FreeBSD (full tunnel not supported)
• Netbird (WireGuard protocol) - Windows, MacOS, iOS, Android, Linux (freemium service)
• Netmaker (WireGuard protocol) - Windows, MacOS, Linux, FreeBSD (freemium service; they say an Android app is in development)
• OmniEdge (n2n protocol) - MacOS, Linux, FreeBSD, OpenWrt; can compile for Windows, iOS, Android, Synology (discontinued commercial service)
• OpenConnect (SSL protocol) - Windows, MacOS, Linux, FreeBSD, OpenBSD, NetBSD, DragonFly BSD, Solaris
• openfortivpn (PPP + SSL protocols) - MacOS, Linux (compatible with Fortinet VPNs)
• OpenGNB (in-house developed "gnb" protocol) - MacOS, Linux, FreeBSD, OpenBSD, OpenWrt
• OpenVPN (in-house developed "OpenVPN" protocol) - Windows, MacOS, iOS, Android, Linux, ChromeOS (via freemium OpenVPN Connect)
• OpenZiti (in-house developed "ziti" protocol) - can compile embedded library and edge clients for Windows, MacOS, iOS, Android, Linux (binaries available from freemium service)
• Orchid (Ethereum protocol) - MacOS, iOS, Android (commercial service)
• Outline (Shadowsocks protocol) - Windows, MacOS, iOS, Android, Linux (no ARM support), ChromeOS
• PairMesh (Noise protocol) - Windows, MacOS, Linux
• Pomerium (gRPC protocol) - any platform that runs Docker (commercial service; management UI not open source)
• PowerTunnel (TCP and UDT protocols) - Windows, MacOS, Linux, Android
• PQ-WG (WireGuard + modified post-quantum protocols) - can compile for Linux
• Pritunl Zero (SSH protocol) - Linux
• Private Internet Access (Wireguard and OpenVPN protocols) - Windows, MacOS, iOS, Android, Linux, ChromeOS, browser extensions (commercial service)
• ProtonVPN (Wireguard and OpenVPN protocols) - Windows, MacOS, iOS, Android, Linux, ChromeOS, browser extensions (commercial service)
• Psiphon (SSH protocol) - Windows, iOS, Android (commercial service; MacOS with Apple silicon client not open source)
• RadVPN (UDP protocol) - can compile for Linux
• Rosenpass (Wireguard protocol) - MacOS, Linux
• rtun (TCP and UDP protocols) - Windows, MacOS, Linux, FreeBSD
• Simple-VPN (Websocket protocol) - Linux
• SoftEther (SSL, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3, and EtherIP protocols) - Windows, MacOS, Linux (WireGuard supported in Developer Edition only)
• sshuttle (SSH protocol) - MacOS, Linux, FreeBSD, OpenBSD
• strongSwan (IKEv2/IPSec protocol) - MacOS, Linux, FreeBSD (can be compiled for Android)
• Tailscale / Headscale (WireGuard protocol) - Windows, MacOS, iOS, Android, Linux (freemium service; mobile clients not open source)
• Tinc (in-house developed "tinc" protocol) - Windows, Linux (MacOS, iOS, and Android supported via closed source third-parties)
• Tor (TCP protocol) - Tor Browser available on Windows, MacOS, Android, and Linux
• TunProxy by raise-isayan (TCP protocol) - can build for Android
• V2Ray (in-house developed "mKCP", "Mux.Cool", and "VMess" protocols) - "V2Ray itself is just a kernel. The GUI client of V2Ray is mostly a shell called V2Ray kernel, similar to the relationship between the Linux kernel and the Linux operating system. But many clients of Shadowsocks are re-implemented [to support] the [V2Ray] protocol[s] by the [V2Ray] author"
• VpnCloud (UDP protocol) - Linux
• VpnHood (TCP and UDP protocols) - Windows, Android, Linux (server only - Linux client is not planned) (website says "the iOS client still needs to be ready"; QUIC protocol is on the roadmap; VpnHood Server is open source but VpnHood Access Server is an experimental freemium service)
• vTunnel by net-byte (WebSocket protocol) - Android (Linux server is vtun)
• Vula (WireGuard + mDNS + DNS-SD + CSIDH protocols) - Linux
• weron (WebRTC protocol) - Windows, MacOS, Linux
• wesher (WireGuard protocol) - can build for Linux
• WG Tunnel (WireGuard protocol) - can build for Android
• Windscribe (WireGuard, OpenVPN, and IKEv2 protocols) - Windows, MacOS, iOS, Android, Linux, ChromeOS, Blackberry, Amazon FireTV, Nvidia Shield, KODI, DD-WRT, Tomato, browser extensions (commercial service)
• WireGuard (in-house developed "WireGuard" protocol) - Windows, MacOS, iOS, Android, Linux, OpenBSD, FreeBSD (see also: Drago)
• wstunnel (WebSocket protocol) - Linux (no ARM support)
• Yggdrasil (in-house developed "Yggdrasil" protocol) - Windows, MacOS, Linux, Ubiquiti EdgeRouter, VyOS, FreeBSD, OpenBSD, and OpenWrt
• ZeroTier (in-house developed "ZeroTier" protocol) - Windows, MacOS, iOS, Android, Linux, Synology (mobile clients not open source but library is; server UI not open source but see ztncui / ZeroUI)