What's New

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.
• Bug fixes.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification implemented

• Exit IP verification implemented

Connection verification simplified

• Connection check now just confirms the tunnel carries traffic
• Removed the country mismatch indicator

Country verification

• Connection is now verified through our own server instead of a third-party service
• Shows a marker when the exit country cannot be verified
• Automatically restores normal routing if connection verification fails

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• On Android you can choose apps as well as sites.
• Add your own, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification added

• Exit IP verification added

Connection verification

• Verifies the tunnel is actually carrying traffic before showing Connected
• Uses our own server for the check instead of a third-party service

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

DPI scaling fix

• Windows: proper DPI scaling for high-DPI displays (150%, 200%, etc.)

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Split-channelling implemented

Preferred country checkup

Exit IP verification implemented

• Exit IP verification implemented
• Russian localization added for connection/exit-IP log messages

Connection verification simplified

• Connection check now just confirms the tunnel carries traffic (no country comparison)
• Removed the country mismatch indicator
• Fixed the in-app update notification (was checking the wrong URL)

Restoring routes on failures, waking logic fixed.

• Network no longer breaks if connection verification fails — routing is now restored automatically
• No longer auto-reconnects after sleep/wake if you manually disconnected

Country verification fixed; Sierra support added

• Country verification fixed
• Sierra support added

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers