High-speed European VPN · Since 2010
Stealth transports help you stay connected on filtered Wi-Fi, campus and workplace networks. Clean EU exit in Romania, unlimited bandwidth, up to 500 Mb/s.
From 1.50 EUR/mo on the 36-month plan · 14-day money-back guarantee on your first payment.
One subscription for a connection that works on filtered networks, with high-speed European routing.
Hotel, campus, workplace or ISP filtering? When needed, the app wraps your tunnel in a browser-like TLS handshake on port 443 and finds an open route on its own.
Your traffic is encrypted between your device and our servers in Romania (EU), with TLS 1.3 and post-quantum ML-KEM key exchange where supported. We don't log the sites you visit.
DNS filtering blocks malware, phishing, ransomware and command-and-control domains before they load. Included in every plan.
Standard VPNs rely on one protocol and one port, which firewalls and deep packet inspection can spot. RoTunneling VPN switches across 6 transport modes and up to 32 parallel streams to keep you connected. You just press Connect.
One tunnel on one port. If the network blocks it, the connection stops at the filter.
The client tests several ports, skips the blocked ones and sends your traffic through the open port, over up to 32 parallel connections, encrypted and wrapped like ordinary web traffic.
Applies to the RoTunneling VPN app.
If one road is blocked, the app takes the next one. On its own. In seconds.
Every connection starts exactly like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.
Top speed on any ordinary network, at home, at the office or on mobile.
Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration), for more speed and lower latency.
When TCP is throttled or filtered, the connection moves to UDP, even from behind a router.
Reliable tunnel over UDP, for networks where TCP is slow or blocked. It works directly, on the servers' fixed UDP ports, or through NAT traversal (NAT-T) when your network does not allow direct UDP connections: the app and the server open a UDP path to each other through NAT.
For hotspots and networks that let little more than name lookups through.
Traffic is carried inside DNS queries, for networks that only let DNS through (such as some hotspots and captive portals).
For networks that block almost everything but still allow ping.
Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping.
When our addresses are blocked, the connection goes around the block through a large data center, as HTTPS traffic.
The connection goes through a cloud-hosted relay on port 443, looking like HTTPS traffic; useful when our server addresses are blocked directly. The network only sees a connection to a large cloud infrastructure. Used automatically when nothing else works; it cannot be chosen manually.
For the strictest networks: the whole connection looks like an ordinary website.
A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. The last option of automatic mode; it cannot be chosen manually. While it is used, the kill switch turns on automatically.
You press Connect. The app picks the road. How we get through networks that block VPNs
Post-quantum encryption TLS 1.3
Bank-grade encryption, built to withstand tomorrow's quantum computers too.
TLS 1.3 with AES-256-GCM and the hybrid post-quantum key exchange X25519MLKEM768 (ML-KEM, a NIST standard), with forward secrecy: traffic recorded today cannot be decrypted tomorrow, not even with a quantum computer. OpenVPN profiles use AES-256 with SHA-512 authentication.
The RoTunneling VPN app tries the modes above by itself and keeps the one that works best on your network. Whatever the mode, the encrypted connection starts with a TLS handshake identical to a modern browser's, so to the network it looks like ordinary web browsing. TCP, UDP, DNS and ICMP can also be chosen manually in Settings > Performance > Transports; Cloud Relay and WSS CDN are used only in automatic mode, as last options.
All modes use the same encryption and the same account; if a route drops, the app moves to the next one automatically. TCP, Cloud Relay and WSS CDN work through an HTTP proxy; UDP, DNS and ICMP do not go through a proxy.
Without the RoTunneling app: OpenVPN (UDP or TCP 443, with our profiles), SSTP (built into Windows, TCP 443) and L2TP/IPsec (iPhone, Mac, routers), with NAT-T on UDP 4500 for connections behind routers.
Connect from campus, workplace, hotel or public Wi-Fi, including networks that throttle VPN protocols, block ports or require an HTTP proxy.
Get a low-latency European IP in Romania with unlimited bandwidth for browsing, remote work, streaming and P2P.
Every plan includes an encrypted connection, unlimited traffic and Malware and Phishing Protection. Choose a longer period and pay less per month.
16 Mb/s
For browsing and occasional use
Save 21%Save 38%Save 50%
Billed monthly, VAT included36.00 28.44 EUR billed every 12 months, VAT included72.00 44.64 EUR billed every 24 months, VAT included108.00 54.00 EUR billed every 36 months, VAT included
14-day money back
50 Mb/s
For your phone, laptop and tablet
Save 21%Save 38%Save 50%
Billed monthly, VAT included84.00 66.36 EUR billed every 12 months, VAT included168.00 104.16 EUR billed every 24 months, VAT included252.00 126.00 EUR billed every 36 months, VAT included
14-day money back
250 Mb/s
More speed for your devices
Save 21%Save 38%Save 50%
Billed monthly, VAT included120.00 94.80 EUR billed every 12 months, VAT included240.00 148.80 EUR billed every 24 months, VAT included360.00 180.00 EUR billed every 36 months, VAT included
14-day money back
500 Mb/s
The highest available speed
Save 21%Save 38%Save 50%
Billed monthly, VAT included192.00 151.68 EUR billed every 12 months, VAT included384.00 238.08 EUR billed every 24 months, VAT included576.00 288.00 EUR billed every 36 months, VAT included
14-day money back
Not sure what speed you need? Run the speed test
Prices include VAT (0%). The period discount is applied at checkout. Customers outside Romania pay in EUR.
Secure card payments
Made for networks where many VPNs get blocked. Running since 2010.
When your ISP, campus or workplace filters standard VPN ports or uses deep packet inspection, the app switches across 6 stealth transports, including port 443, to keep you connected. See how it works
It does not seem fair to pay the same for a 28-day month as for a 31-day one. The difference up to 31 days is our gift to you. It applies to subscriptions paid on the website; in the App Store and Google Play the period is the store's.
P2P is included on our servers in Romania in every plan, with no traffic caps.
The RoTunneling team answers technical and billing questions directly at [email protected], in English or Romanian.
The RoTunneling client uses UT-VPN, our own protocol tuned for speed, with up to 32 simultaneous connections and lower latency.
UT-VPN, our native protocol, supports up to 32 bidirectional TCP/UDP sessions between client and server, UDP acceleration for TCP traffic and TLS 1.3 AES-256-GCM encryption, with hybrid X25519/ML-KEM key exchange when the TLS 1.3 connection negotiates it.
The client automatically tests which ports and protocols work, retries if a route drops and adjusts its settings for maximum speed. You just press Connect.
Automatically tests 6 transport modes (5 on macOS, without ICMP): TCP with UDP acceleration, UDP (direct or through NAT-T), DNS, ICMP, Cloud Relay and WSS CDN, on suitable ports; compatible TCP connections can use a browser-like TLS handshake with a standard TLS fallback; retries automatically if a route drops and tunes MTU and buffers for maximum speed. See the transport modes
Sign up, pick the speed and the period (an optional speed test recommends a plan) and enter your billing details, as an individual or a company.
Pay securely by card, Google Pay or Apple Pay. The fiscal invoice arrives automatically by email.
Install the RoTunneling VPN client or OpenVPN and connect to our servers in Romania.
A high-speed VPN service, running since 2010, with servers in Romania, inside the European Union. It encrypts your traffic between your device and our servers, and its stealth transports help keep the internet open on filtered networks and behind firewalls.
Registration has three steps: your account (email, username and password), your plan and your billing details. At the plan step you can run an optional speed test and we recommend a plan. You see the total, VAT included, before you pay. After payment, the confirmation page takes you to the download that fits your device. If you stop halfway, sign in and continue where you left off.
By debit or credit card (Visa, Mastercard, American Express), Apple Pay or Google Pay, through Stripe. We do not store your full card details. You get a fiscal invoice for every payment, by email and in your account under Invoices. Prices are in lei for Romania and in EUR for other countries, VAT included where it applies.
Yes. Choose Company in the billing details. For Romanian companies we fill in the details from the tax ID (CUI), using ANAF. For companies in another EU country we check the VAT number in VIES; if it is valid, the invoice has no VAT (reverse charge). Companies outside the EU enter their local tax ID.
The longer the period you pay for, the lower the monthly price: -21% for 12 months, -38% for 24 months and -50% for 36 months. If you have a coupon, enter it during registration, at the Plan step, or in your account under Discount coupon. A coupon does not stack with the period discount: the larger one applies.
Write to [email protected] within 14 days of your first payment. We first try to solve the problem; if you are still not satisfied, we refund the money to the card you paid with.
Four days before your current subscription expires, the Change plan option becomes active in your account. For a different billing period, make a manual payment from your account with the Change button.
A subscription paid by card renews automatically, for individuals and companies. Four days before it expires you get a reminder email. You can turn auto-renewal off any time from your account, on the Status tab, with the Unsubscribe button; the subscription stays active until the end of the paid period.
The RoTunneling VPN 6 app is for Windows 10 and 11, macOS 14 or newer, Linux (Debian, Ubuntu) and Android, including Android TV. On macOS the app uses 5 of the 6 transport modes (no ICMP). On iPhone and iPad you use OpenVPN Connect with our profiles, or L2TP/IPsec through a signed profile; you can use them on a Mac too, as an alternative. It also works on routers through OpenVPN, SSTP or L2TP/IPsec. You connect to our high-speed servers in Romania. Big and Omega allow 2 connected devices at a time, Gyga 3 and Terra 4.
The app uses UT-VPN, with UDP acceleration and up to 32 simultaneous connections. It also picks the port and protocol that work on your network on its own and adjusts MTU and buffers for maximum speed.
The app automatically tries other ports and transport modes: UDP (direct or through NAT-T), DNS, ICMP (not on macOS), a cloud relay and, finally, a secure WebSocket through a CDN. On compatible TCP connections the app can use a browser-like TLS handshake. See the transport modes. In the OpenVPN profiles you can use the _TCP variant on port 443, which also works through an HTTP proxy.
Check that you have the latest version of the app, switch to the other available server in the app and, if you use a proxy, set it in the app under Proxy settings. A firewall or antivirus can block the app: allow it, or turn it off briefly to test. If the problem persists, write to [email protected].
A DNS-based prevention system with two layers: one developed by us and one based on a global security DNS service. It blocks websites that spread malware, phishing and ransomware, C&C servers, tracking and some ads. It is free for every client. If a site or app you cannot reach seems blocked by mistake, write to [email protected].
In your account on the site you can sign in with your username or your email; in the VPN app you use your username. If you forgot your password, open Forgot your password? and enter your email or username. We send you a link, valid for 60 minutes and usable once, to choose a new password. We never send passwords by email. The email with the link also contains your account username.
In your account, on the Profile tab, click Delete account and confirm with your password. The account is deleted after 30 days; until then you can use it and cancel the deletion from your account or from the link we email you. Auto-renewal stops right away and the saved card is removed from the account. A new payment during those 30 days cancels the deletion. Any remaining paid time is forfeited without a refund; the refund within 14 days of the first payment still applies. Invoices are kept as long as the law requires.
You have 14 days from your first payment to make sure it fits. If it doesn't, write to [email protected] and we'll fix it or refund you.
High-speed European VPN since 2010. Servers in Romania (EU), open internet on restrictive networks, support in English and Romanian.
Support: [email protected]
Support chat is off. Turn on chat or write to [email protected].
© 2010-2026 RedShift IT SRL. All rights reserved.
