High-speed European VPN · Since 2010
Stealth transports help you stay connected on filtered Wi-Fi, campus and workplace networks. Clean EU exit in Romania, unlimited bandwidth, up to 500 Mb/s.
From 1.50 EUR/mo on the 36-month plan · 14-day money-back guarantee on your first payment.
One subscription for a connection that works on filtered networks, with high-speed European routing.
Hotel, campus, workplace or ISP filtering? When needed, the app wraps your tunnel in a browser-like TLS handshake on port 443 and finds an open route on its own.
Your traffic is encrypted between your device and our servers in Romania (EU), with TLS 1.3 and post-quantum ML-KEM key exchange where supported. We don't log the sites you visit.
Most infections start with a connection. Every DNS request is checked in real time against more than 3 million dangerous domains and IP addresses, plus the AI detection of Vatra Sentinel, so a malicious connection never starts. Already infected? We cut the malware off from its command servers. Included in every plan.
Standard VPNs rely on one protocol and one port, which firewalls and deep packet inspection can spot. RoTunneling VPN switches across 5 transport modes and up to 32 parallel streams to keep you connected. You just press Connect.
One tunnel on one port. If the network blocks it, the connection stops at the filter.
The client tests several ports, skips the blocked ones and sends your traffic through the open port, over up to 32 parallel connections, encrypted and wrapped like ordinary web traffic.
Applies to the RoTunneling VPN app.
If one road is blocked, the app moves to the next one on its own, in seconds.
The main connection starts like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.
Top speed on any ordinary network, at home, at the office or on mobile.
Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration, encrypted with ChaCha20-Poly1305), for more speed and lower latency. The app remembers the port that worked on your network and starts with it next time.
When TCP is throttled or filtered, the connection moves to UDP, straight to our servers.
Reliable tunnel over UDP, for networks where TCP is slow or blocked. The app connects straight to our servers, on the UDP ports published by our own server directory. Our own NAT traversal: the app learns the right UDP port from our own server directory, with no third-party service. The TLS session runs over this channel, as it does over TCP.
For hotspots and networks that let little more than name lookups through.
Traffic is carried inside DNS queries to our servers, on UDP 53, for networks that only let DNS through (such as some hotspots and captive portals). It is slower than TCP or UDP, and it keeps you connected where the network lets only DNS through.
For networks that block almost everything but still allow ping.
Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping. Not available on macOS.
For the strictest networks: the whole connection looks like an ordinary website.
A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. It runs on TCP port 443, and inside the WebSocket runs the usual TLS session to our server, with the certificate checked. The last option of automatic mode; it cannot be chosen manually. On Windows, while it is used, the kill switch turns on automatically, whatever your setting.
You press Connect. The app picks the road. How we get through networks that block VPNs
Post-quantum encryption TLS 1.3
Bank-grade encryption, built to withstand tomorrow's quantum computers too.
TLS 1.3 with AES-256-GCM and the hybrid post-quantum key exchange X25519MLKEM768 (ML-KEM, a NIST standard), with forward secrecy: the key exchange is built to resist a quantum computer too, so traffic recorded today cannot later be decrypted with one. OpenVPN profiles use AES-256-CBC with HMAC SHA-512 authentication.
The RoTunneling VPN app tries the modes above by itself and keeps the one that works best on your network. The encrypted connection starts with a TLS handshake similar to a modern browser's, so to the network it looks like ordinary web browsing; if the server does not accept it, the app falls back to standard TLS. TCP, UDP, DNS and ICMP can also be chosen manually in Settings > Performance > Transports; WSS CDN is used only in automatic mode, as the last option.
All modes use the same TLS encryption and the same account; if a route drops, the app moves to the next one automatically. Through an HTTP proxy you connect with the TCP mode; the other modes go direct, without a proxy.
Kill switch, IPv6 and DNS: the kill switch is an option in Settings, off by default; when on, it blocks traffic outside the tunnel while the app reconnects (on macOS it keeps the tunnel routes, but does not block traffic if the system stops the VPN extension). The VPN is IPv4 only: the app sends IPv6 into the tunnel or blocks it. With anti-malware protection on, DNS is resolved by our servers, without logs; with it off, the app uses 1.1.1.1 and 9.9.9.9. We don't log your activity: How we protect you.
Without the RoTunneling app: OpenVPN (UDP or TCP 443, with our profiles), SSTP (built into Windows, TCP 443) and L2TP/IPsec (iPhone, Mac, routers), with UDP 4500 encapsulation for connections behind routers.
Connect from campus, workplace, hotel or public Wi-Fi, including networks that throttle VPN protocols, block ports or require an HTTP proxy.
Get a low-latency European IP in Romania with unlimited bandwidth for browsing, remote work, streaming and P2P.
Every plan includes an encrypted connection, unlimited traffic and Malware and Phishing Protection. Choose a longer period and pay less per month.
Estimated for United States, based on your location. The final total follows your billing address.
16 Mb/s
For browsing and occasional use
Save 21%Save 38%Save 50%
Billed monthly36.00 28.44 EUR billed every 12 months72.00 44.64 EUR billed every 24 months108.00 54.00 EUR billed every 36 monthsNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EU
14-day money back
50 Mb/s
For a phone and a laptop
Save 21%Save 38%Save 50%
Billed monthly84.00 66.36 EUR billed every 12 months168.00 104.16 EUR billed every 24 months252.00 126.00 EUR billed every 36 monthsNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EU
14-day money back
250 Mb/s
More speed for your devices
Save 21%Save 38%Save 50%
Billed monthly120.00 94.80 EUR billed every 12 months240.00 148.80 EUR billed every 24 months360.00 180.00 EUR billed every 36 monthsNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EU
14-day money back
500 Mb/s
The highest available speed
Save 21%Save 38%Save 50%
Billed monthly192.00 151.68 EUR billed every 12 months384.00 238.08 EUR billed every 24 months576.00 288.00 EUR billed every 36 monthsNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EUNo VAT · outside the EU
14-day money back
Not sure what speed you need? Run the speed test
No VAT for United States (outside the EU). Prices in EUR. The period discount is applied at checkout.
Secure card payments
Made for networks where many VPNs get blocked. Running since 2010.
When your ISP, campus or workplace filters standard VPN ports or uses deep packet inspection, the app switches across 5 stealth transport modes, including port 443, to keep you connected. See how it works
Every month you pay for on the website gives you 31 days of VPN, February included. The extra days are our gift to you. It applies to subscriptions paid on the website; in the App Store and Google Play the period is the store's.
P2P is included on our servers in Romania in every plan, with no traffic caps.
The RoTunneling team answers technical and billing questions directly at [email protected], in English or Romanian.
The RoTunneling client uses the open-source SoftEther VPN protocol, with up to 32 parallel connections and UDP acceleration for high speed and lower latency.
The protocol is SoftEther VPN, open source under the Apache 2.0 license, developed at the University of Tsukuba in Japan. The app opens up to 32 parallel TCP connections to the server and, when the network allows it, a fast UDP channel alongside (UDP acceleration, encrypted with ChaCha20-Poly1305). The session uses TLS 1.3 with AES-256-GCM and the hybrid post-quantum X25519MLKEM768 key exchange. The apps, the automatic transport choice and the fallback transports are written by us. How we protect you
The client automatically tests which ports and protocols work, retries if a route drops and adjusts its settings for maximum speed. You just press Connect.
Automatically tests 5 transport modes (4 on macOS, without ICMP): TCP with UDP acceleration, direct UDP, DNS, ICMP and WSS CDN. Ports: TCP 443 and 24 others, UDP on the ports published by our own server directory, DNS on UDP 53, WSS CDN on TCP 443. Compatible TCP connections can use a browser-like TLS handshake with a standard TLS fallback; retries automatically if a route drops and tunes MTU and buffers for maximum speed. See the transport modes
Sign up, pick the speed and the period (an optional speed test recommends a plan) and enter your billing details, as an individual or a company.
Pay securely by card, Google Pay or Apple Pay. The fiscal invoice arrives automatically by email.
Install the RoTunneling VPN client or OpenVPN and connect to our servers in Romania.
A high-speed VPN service, running since 2010, with servers in Romania, inside the European Union. It encrypts your traffic between your device and our servers, and its stealth transports help keep the internet open on filtered networks and behind firewalls.
Registration has three steps: your account (email, username and password), your plan and your billing details. At the plan step you can run an optional speed test and we recommend a plan. You see the total, VAT included, before you pay. After payment, the confirmation page takes you to the download that fits your device. If you stop halfway, sign in and continue where you left off.
By debit or credit card (Visa, Mastercard, American Express), Apple Pay or Google Pay, through Stripe. We do not store your full card details. You get a fiscal invoice for every payment, by email and in your account under Invoices. Prices are in lei for Romania and in EUR for other countries, VAT included where it applies.
Yes. Choose Company in the billing details. For Romanian companies we fill in the details from the tax ID (CUI), using ANAF. For companies in another EU country we check the VAT number in VIES; if it is valid, the invoice has no VAT (reverse charge). Companies outside the EU enter their local tax ID.
The longer the period you pay for, the lower the monthly price: -21% for 12 months, -38% for 24 months and -50% for 36 months. If you have a coupon, enter it during registration, at the Plan step, or in your account under Discount coupon. If you have both a coupon and a period discount, the larger of the two applies.
Write to [email protected] within 14 days of your first payment. We first try to solve the problem; if you are still not satisfied, we refund the money to the card you paid with.
Yes, from your account, under Change plan. A higher plan starts right away: you pay only the difference for the days left, and your expiry date stays the same. A lower plan applies from your next renewal. For a different billing period, make a manual payment from your account with the Change button.
A subscription paid by card renews automatically, for individuals and companies. Four days before it expires you get a reminder email. You can turn auto-renewal off any time from your account, on the Status tab, with the Unsubscribe button; the subscription stays active until the end of the paid period.
The RoTunneling VPN 6 app is for Windows 10 and 11, macOS 14 or newer, Linux (Debian, Ubuntu) and Android, including Android TV. On macOS the app uses 4 of the 5 transport modes (no ICMP). On iPhone and iPad you use OpenVPN Connect with our profiles, or L2TP/IPsec through a signed profile; you can use them on a Mac too, as an alternative. It also works on routers through OpenVPN, SSTP or L2TP/IPsec. You connect to our high-speed servers in Romania. Simultaneous devices per plan: Big 2, Omega 2, Gyga 3, Terra 4.
The app uses the open-source SoftEther VPN protocol, with UDP acceleration and up to 32 parallel connections. It also picks the port and protocol that work on your network on its own and adjusts MTU and buffers for maximum speed.
The app automatically tries other ports and transport modes: UDP straight to our servers, DNS, ICMP (not on macOS) and, finally, a secure WebSocket through a CDN. On compatible TCP connections the app can use a browser-like TLS handshake. See the transport modes. In the OpenVPN profiles you can use the _TCP variant on port 443, which also works through an HTTP proxy.
Check that you have the latest version of the app, switch to the other available server in the app and, if you use a proxy, set it in the app under Proxy settings. A firewall or antivirus can block the app: allow it, or turn it off briefly to test. If the problem persists, write to [email protected].
Our own DNS protection, running on the RoTunneling servers and included free in every plan. While you are connected, every DNS request is checked in real time against more than 3 million domains and IP addresses known to be dangerous. If the destination is malicious, the connection never starts, so malware cannot download its payload and fake pages never load. If a device is already infected, we block its command-and-control servers, so the malware gets no orders and cannot send your data out. The lists are updated every hour and combine our own system with alerts published by CERT teams in several countries, specialised lists of malware, phishing, scams, stalkerware, crypto mining and malvertising ad networks, and Vatra Sentinel, a Romanian AI-based system that spots phishing and malware sites from the moment they get an SSL certificate. We also block some tracking domains, chosen so apps and sites keep working; it is not an ad blocker. Keep your antivirus too: we stop the threat on the network, and the antivirus protects whatever still reaches the device. If a site or app you cannot reach seems blocked by mistake, write to [email protected].
In your account on the site you can sign in with your username or your email; in the VPN app you use your username. If you forgot your password, open Forgot your password? and enter your email or username. We send you a link, valid for 60 minutes and usable once, to choose a new password. We never send passwords by email. The email with the link also contains your account username.
In your account, on the Profile tab, click Delete account and confirm with your password. The account is deleted after 30 days; until then you can use it and cancel the deletion from your account or from the link we email you. Auto-renewal stops right away and the saved card is removed from the account. A new payment during those 30 days cancels the deletion. The refund within 14 days of the first payment still applies; after that, remaining paid time is not refunded. Invoices are kept as long as the law requires.
You have 14 days from your first payment to make sure it fits. If it doesn't, write to [email protected] and we'll fix it or refund you.
High-speed European VPN since 2010. Servers in Romania (EU), open internet on restrictive networks, support in English and Romanian.
Support: [email protected]
Support chat is off. Turn on chat or write to [email protected].
© 2010-2026 RedShift IT SRL. All rights reserved.
