oVPN Frequently Asked Questions

  • What can I do with oVPN.to?
    Browse and use the WWW anonymized, uncensored, encrypted and secured through our openVPN / SSH-SOCKS5 / SSL-SOCKS5 / HTTP / TOR Proxy Servers.
    Servers are inter-connected with tinc-VPN and you can chain and randomize SOCKS5/HTTP between Servers through AES-256-CTR/SHA256 encrypted vLAN.
    You can use our Usenet Access to read news or download binaryfiles with fullspeed through our anonymized network.

  • Which encryption is oVPN.to using?
  • openVPN: AES-256-CBC (v2.3) with HMAC SHA-512 or AES-256-GCM (v2.4+).
  • openVPN 2.4+ allows AES-128/192 too.
  • openVPN CA & Server Keys are 4096 bit strong.
  • SSH: AES-256-GCM or you can specify own ciphers.
  • SSL Tunnel: ECDHE-AES-256-GCM or CHACHA20.
  • Do you help me on problems with setup or configurations?
    Yes! Support is available on Chat or IRC!
    Join our Board and create a Support-Ticket or send PGP encrypted email to support@vpn.to

  • Setup and Installation
    You need openVPN software (opensource) to use our Anonymous VPN.
    We have configurations per server with your private keys and certificates included.

  • Windows (oVPN.to Client): 'Download'
    Download, Install and Start our 'oVPN.to Client'.
    Enter your 'User ID' + 'API Key' from Account page.
    Our Client will install latest openVPN 2.4.x.
    Do NOT use the standard openVPN GUI! Use only 'oVPN.to Client' !
  • Windows (Standard openVPN GUI): 'OpenVPN.net ( Community )' latest release on branch 2.4.x.
    Extract Configs ZIP file into '%PROGRAMFILES%\openvpn\config\'

  • Linux: install 'openVPN' (2.3.x/2.4.x) package from your distribution or compile latest openVPN from source.
    Become root and extract the Configs ZIP file into '/etc/openvpn'
    Connect with 'openvpn --config /etc/openvpn/NL5.ovpn.to.ovpn'
    You can find more detailed instructions for linux here.

  • MAC OS X: Tunnelblick (opensource) or Viscosity
    Extract the Configs ZIP file and doubleclick the .ovpn files to import into Tunnelblick!

  • Android: openVPN for Android (from google playstore), Author 'Arne Schwabe'
    Extract the Configs ZIP file into /sdcard/openvpn/ and import!

  • iPhone/iPad iOS: openVPN Connect App
    Import TCP configs into iOS openVPN Connect App. UDP does not work!

  • Payment Methods
    We offer different payment methods and you'll get credits to your account after payment.
    You can enable service from your credit balance whenever you need.

  • Is there any connection limit?
    Every oVPN Server allows 1 connection / device with openVPN.
    IPv6 enabled oVPN Servers allow 2nd connection with ipv46 configs or ipv64 configs.
    We have more than 40 oVPN Servers available, so you can connect more than 40 devices: each to a different oVPN Server.
    SSH or SOCKS5/HTTP-Proxy have no connection limits!

  • Is there any bandwidth limit?
    We don't limit bandwidth for anyone until we notice real excessive usage, disturbing other clients or server itself.
    If you need lots of traffic please contact support or join Chat!

  • Some IRC networks block access from oVPN.to Servers, because an open proxy is detected?
    Yes, this can happen on many IRC networks! Join our IRC into channel #help and tell your IRC Server address to whitelist.
    We'll add the IPs to our input drop list and you can connect to your IRC network!

  • Does oVPN.to create any logfiles or monitor my traffic?
    None of our oVPN Server creates any logs and we will never monitor, collect or record or do anything else with your traffic.
    We have no information about when you connect or disconnect or how much traffic you produce or what you download or upload.
    Only in case of abuse, we are able to monitor traffic from Server to abused/attacked hosts, just to stop/block abuse through our services.

  • Under which jurisdiction is oVPN.to?
    Each oVPN Server is handled with jurisdiction at Server's location/country.
    We will close Servers and notify our customers, if we are forced to create any logs anywhere. Not happened yet.
    Your jurisdiction depends on your location/country.

  • Does oVPN.to use Dedicated or Virtual Servers?
    All our servers are real dedicated roots or selfhosted KVM on our roots to earn maximum corepower from CPUs.
    We don't trust VirtualServers for full anonymity, if we don't host them ourselves, because diskdumps or even memorydumps could be made easy...

  • How does oVPN.to keep Servers secure?
    We setup Servers with minimal Debian Linux OS and store all needed software and configfiles on RAM mounts!
    Servers become inaccessible for our clients after system failure, reboot or take down.
    No information left when server goes offline or reboots.
    We have to run our setup process again to get servers back online and usable for you.
    Our cronjob monitors software for needed updates and compiles updates automatically.

  • Can I share my account with my friends?
    We don't want accounts to be shared between different people, but we can't determine sharing of accounts...
    You can use your account on your own devices without restrictions and even from different IPs/uplinks.

  • Does oVPN.to block ports or anything?
    We block some ports from our servers to world, mostly caused by abuses.
    Port 25 TCP: Plain SMTP
    Port 42 TCP+UDP: WINS (Microsoft Security Issue)
    Port 135 TCP+UDP, 137 TCP+UDP, 138 TCP+UDP, 139 TCP+UDP, 445 TCP: Microsoft SMB Sharing
    Port 520 UDP: Routing Information Protocol
    Port 1900 UDP: Microsoft UPnP Discovery
    Port 3478 TCP+UDP: STUN standard port
    Port 3544 UDP: Microsoft Teredo IPv6 Tunneling (for your own security!)
    None of these blocked ports should affect you.
    We had to block some IPs/ranges, but for privacy reasons we can't post a list.
    If you are unable to connect to any site or IP/range, ask us about and we will tell you.
    We will block IPs or ranges upon any abusive request or if abused site, owner or provider requests from us to prevent future abuses.

  • Does oVPN.to protect against DNS Leak?
    DNS Leak is a not a VPN providers fault. It is always a problem in your OS! Read dnscrypt for more information.
    Note: We redirect DNS queries from VPN to 8.8.8.8, 8.8.4.4 (google-dns) and 208.67.222.222, 208.67.220.220 (opendns) to 172.16.32.1!
    Set your DNS to 172.16.32.1 while connected to oVPN.
    Other DNScrypt available here: https://dns.d0wn.biz or openNIC Tier2 DNS.

  • Does oVPN.to serve a NTP Timeserver?
    Internal NTP Timeserver IP: 172.16.32.1.
    Some of our ISP block NTP. We redirect following most used NTP addresses to internal NTP!
    pool.ntp.org, 0.debian.pool.ntp.org, time.microsoft.akadns.net, time.windows.com, time.nist.gov, time-nw.nist.gov, time-a.nist.gov, time-b.nist.gov, time-c.nist.gov, time-d.nist.gov
    Not redirected: 0.pool.ntp.org or anything else from ntp.org.

  • Does oVPN.to support IPv6 or Dual-Stack Lite?
    IPv6 with openVPN is working in 3 different ways:
  • you can connect 1st device with openVPN IPv4-only-configs from IPv4 to IPv4 Servers and have access to anonymized IPv4 Internet
  • and you can connect 2nd device with openVPN IPv46-configs from IPv4 to IPv4 Servers and have access to anonymized IPv4 and IPv6 Internet
  • or you can connect 2nd device with openVPN IPv64-configs from IPv6 to IPv6 Servers and have access to anonymized IPv4 and IPv6 Internet
  • You are not directly exposed to IPv6 internet, we deploy private IPv6 fd48:/64 per Server.
    Portforwarding with IPv6 is possible. Own Public IPv6 will arrive soon.

  • Is UDP/TCP port forwarding through openVPN supported?
    Yes, you can forward (open) up to 20 ports same like in your router, allowing torrent or other services to reach your client.
    We will close forwarded ports on DMCA request and send notice into your account...

  • Why do I need email for registration?
    You need valid email to change or request lost password.
    We store your account mail encrypted with itself, so we are unable to reveal it.

  • ...
    Any questions? Join Chat!