Alternatives to OpenVPN Community
The VPN protocol and client that has been the default for two decades, and still runs on everything. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
OpenVPN Community
The VPN protocol and client that has been the default for two decades, and still runs on everything.
Replacements
Listings that take over the same core job as OpenVPN Community.
WireGuard
A small, fast VPN protocol and set of official clients that connect two machines by exchanging public keys.
WireGuard is faster with much less code to audit and roams between networks, but each peer needs a static tunnel address and it does not hide VPN use by default.
Outline VPN
Self-run VPN server built on Shadowsocks, made for censored networks.
Outline VPN uses Shadowsocks to resist blocking, with a manager application that simplifies server creation and key sharing, but you pay for and run the server yourself.
AmneziaVPN
Sets up your own VPN server on a machine you rent, then connects to it, with obfuscated protocols for networks that block ordinary VPNs.
AmneziaVPN installs and configures a server over SSH from its client and offers obfuscated protocols for restrictive networks, but needs a rented server and root credentials.
Algo VPN
Ansible scripts that stand up a personal WireGuard and IPsec VPN.
Algo VPN deploys a personal WireGuard and IPsec server with Ansible scripts and fixed cryptographic defaults, avoiding complex configuration, but runs from macOS, Linux or the command line.
sing-box
A universal proxy platform that speaks WireGuard, Shadowsocks, VMess, Trojan, Hysteria and more from one binary.
sing-box speaks WireGuard, Shadowsocks, Trojan and more as client or server with per-connection routing, but has no graphical interface and complex JSON configuration.
OpenVPN Access Server
A self-hosted business VPN server with a web admin interface, free for two simultaneous connections.
OpenVPN Access Server uses the same protocol with a web admin panel and LDAP, RADIUS and SAML, but is proprietary, Linux-only and free for two connections.
SoftEther VPN
An open-source multi-protocol VPN server and client for remote access and site-to-site networking.
SoftEther VPN is an Apache-2.0 multi-protocol server and client with an SSL-VPN that passes restrictive firewalls, plus built-in dynamic DNS and NAT traversal.
strongSwan
An open-source IPsec VPN implementation using the IKEv2 and IKEv1 key exchange protocols.
strongSwan uses standards-based IPsec with IKEv2 across Linux, Android, macOS and Windows, but configuration requires solid IPsec knowledge through files and the command line.
Also worth comparing
These listings name OpenVPN Community as their own alternative, so the relationship runs both ways.
Libreswan
A free IPsec and IKE VPN implementation for Linux, FreeBSD and macOS.
OpenVPN Community replaces IPsec with its own protocol over TCP or UDP on any port, with clients on every major platform, though it is slower than WireGuard.
ocserv
An open-source Linux SSL VPN server compatible with OpenConnect and AnyConnect clients.
OpenVPN Community replaces the AnyConnect protocol with OpenVPN, which is supported by nearly every router and client and runs over TCP or UDP on any port.
OpenVPN Connect
The official OpenVPN client app for connecting to OpenVPN servers from desktop and mobile devices.
OpenVPN Community is the open source GPL-2.0 client and protocol on all major platforms plus command line, rather than the proprietary official app.
OpenVPN for Android
An open-source OpenVPN client for Android, developed as a spare-time project by Arne Schwabe.
OpenVPN Community provides the open source GPL-2.0 protocol and clients across Android, desktop and iOS, with flexible certificate, password and hardware token authentication.
Passepartout
An open-source OpenVPN and WireGuard client for iPhone, iPad, Mac and Apple TV.
OpenVPN Community offers open source OpenVPN clients across Windows, macOS, Linux, Android and iOS, but not WireGuard or on-demand rules.
Tunnelblick
A free, open-source graphical OpenVPN client for macOS that bundles everything needed to connect.
OpenVPN Community's own client runs on Windows, macOS, Linux, Android and iOS, but lacks Tunnelblick's bundled macOS integration.
Viscosity
A native OpenVPN client for macOS and Windows with a graphical editor, traffic statistics and DNS control.
OpenVPN Community's free open-source client adds Linux, Android and iOS support, but lacks Viscosity's polished graphical editor and traffic statistics.
Similar software
Related functionality, not a direct replacement.
Proton VPN
A VPN from the Proton Mail company with a free tier that has no data cap, and open source clients.
Mullvad VPN
A flat-rate VPN service with anonymous account numbers instead of usernames, and open source apps.
Tailscale
Builds a private network between your own devices using WireGuard, without opening ports or running a server.
OPNsense
An open-source firewall and routing platform based on FreeBSD that you install on your own hardware.
IPFire
A hardened Linux-based firewall distribution with VPN support, network segmentation and a web management console.
VyOS
An open-source network operating system that combines routing, firewall and VPN functions in one platform.