RoTunneling VPN Downloads

If one road is blocked, the app takes the next one. On its own. In seconds.

Every connection starts exactly like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.

TCP + UDP acceleration Main mode

Top speed on any ordinary network, at home, at the office or on mobile.

Technical details

Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration), for more speed and lower latency.

UDP (R-UDP + NAT-T)

When TCP is throttled or filtered, the connection moves to UDP, even from behind a router.

Technical details

Reliable tunnel over UDP, for networks where TCP is slow or blocked. It works directly, on the servers' fixed UDP ports, or through NAT traversal (NAT-T) when your network does not allow direct UDP connections: the app and the server open a UDP path to each other through NAT.

DNS

For hotspots and networks that let little more than name lookups through.

Technical details

Traffic is carried inside DNS queries, for networks that only let DNS through (such as some hotspots and captive portals).

ICMP (ping)

For networks that block almost everything but still allow ping.

Technical details

Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping.

Cloud Relay Automatic only

When our addresses are blocked, the connection goes around the block through a large data center, as HTTPS traffic.

Technical details

The connection goes through a cloud-hosted relay on port 443, looking like HTTPS traffic; useful when our server addresses are blocked directly. The network only sees a connection to a large cloud infrastructure. Used automatically when nothing else works; it cannot be chosen manually.

WSS CDN Automatic only

For the strictest networks: the whole connection looks like an ordinary website.

Technical details

A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. The last option of automatic mode; it cannot be chosen manually. While it is used, the kill switch turns on automatically.

You press Connect. The app picks the road. How we get through networks that block VPNs

If one road is blocked, the app takes the next one. On its own. In seconds.

Every connection starts exactly like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.

TCP + UDP acceleration Main mode

Top speed on any ordinary network, at home, at the office or on mobile.

Technical details

Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration), for more speed and lower latency.

UDP (R-UDP + NAT-T)

When TCP is throttled or filtered, the connection moves to UDP, even from behind a router.

Technical details

Reliable tunnel over UDP, for networks where TCP is slow or blocked. It works directly, on the servers' fixed UDP ports, or through NAT traversal (NAT-T) when your network does not allow direct UDP connections: the app and the server open a UDP path to each other through NAT.

DNS

For hotspots and networks that let little more than name lookups through.

Technical details

Traffic is carried inside DNS queries, for networks that only let DNS through (such as some hotspots and captive portals).

ICMP (ping)

For networks that block almost everything but still allow ping.

Technical details

Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping.

Cloud Relay Automatic only

When our addresses are blocked, the connection goes around the block through a large data center, as HTTPS traffic.

Technical details

The connection goes through a cloud-hosted relay on port 443, looking like HTTPS traffic; useful when our server addresses are blocked directly. The network only sees a connection to a large cloud infrastructure. Used automatically when nothing else works; it cannot be chosen manually.

WSS CDN Automatic only

For the strictest networks: the whole connection looks like an ordinary website.

Technical details

A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. The last option of automatic mode; it cannot be chosen manually. While it is used, the kill switch turns on automatically.

You press Connect. The app picks the road. How we get through networks that block VPNs

If one road is blocked, the app takes the next one. On its own. In seconds.

Every connection starts exactly like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.

TCP + UDP acceleration Main mode

Top speed on any ordinary network, at home, at the office or on mobile.

Technical details

Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration), for more speed and lower latency.

UDP (R-UDP + NAT-T)

When TCP is throttled or filtered, the connection moves to UDP, even from behind a router.

Technical details

Reliable tunnel over UDP, for networks where TCP is slow or blocked. It works directly, on the servers' fixed UDP ports, or through NAT traversal (NAT-T) when your network does not allow direct UDP connections: the app and the server open a UDP path to each other through NAT.

DNS

For hotspots and networks that let little more than name lookups through.

Technical details

Traffic is carried inside DNS queries, for networks that only let DNS through (such as some hotspots and captive portals).

ICMP (ping)

For networks that block almost everything but still allow ping.

Technical details

Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping.

Cloud Relay Automatic only

When our addresses are blocked, the connection goes around the block through a large data center, as HTTPS traffic.

Technical details

The connection goes through a cloud-hosted relay on port 443, looking like HTTPS traffic; useful when our server addresses are blocked directly. The network only sees a connection to a large cloud infrastructure. Used automatically when nothing else works; it cannot be chosen manually.

WSS CDN Automatic only

For the strictest networks: the whole connection looks like an ordinary website.

Technical details

A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. The last option of automatic mode; it cannot be chosen manually. While it is used, the kill switch turns on automatically.

You press Connect. The app picks the road. How we get through networks that block VPNs

If one road is blocked, the app takes the next one. On its own. In seconds.

Every connection starts exactly like a browser's, on port 443, like any HTTPS site. To the network, you are just someone browsing the web.

TCP + UDP acceleration Main mode

Top speed on any ordinary network, at home, at the office or on mobile.

Technical details

Encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, like ordinary HTTPS traffic, then 80, 8080, mail ports, DNS-over-TLS and others). When the network allows UDP, data also flows over a fast UDP channel (UDP acceleration), for more speed and lower latency.

UDP (R-UDP + NAT-T)

When TCP is throttled or filtered, the connection moves to UDP, even from behind a router.

Technical details

Reliable tunnel over UDP, for networks where TCP is slow or blocked. It works directly, on the servers' fixed UDP ports, or through NAT traversal (NAT-T) when your network does not allow direct UDP connections: the app and the server open a UDP path to each other through NAT.

DNS

For hotspots and networks that let little more than name lookups through.

Technical details

Traffic is carried inside DNS queries, for networks that only let DNS through (such as some hotspots and captive portals).

ICMP (ping)

For networks that block almost everything but still allow ping.

Technical details

Traffic is carried inside ICMP packets, for networks that block TCP and UDP but allow ping.

Cloud Relay Automatic only

When our addresses are blocked, the connection goes around the block through a large data center, as HTTPS traffic.

Technical details

The connection goes through a cloud-hosted relay on port 443, looking like HTTPS traffic; useful when our server addresses are blocked directly. The network only sees a connection to a large cloud infrastructure. Used automatically when nothing else works; it cannot be chosen manually.

WSS CDN Automatic only

For the strictest networks: the whole connection looks like an ordinary website.

Technical details

A secure WebSocket (WSS) tunnel delivered through a CDN: the traffic itself, not only the handshake, looks like ordinary web browsing. The last option of automatic mode; it cannot be chosen manually. While it is used, the kill switch turns on automatically.

You press Connect. The app picks the road. How we get through networks that block VPNs