The zero-compromise cryptographic tunnel engineered for seamless mobile roaming on Android and iOS.
Conventional VPNs constantly stall, drop connections, and renegotiate keys when walking out of your home Wi-Fi into cellular 5G coverage. TunTun VPN solves this from first principles—pairing native operating system network drivers with a modern Rust cryptographic core to deliver unbroken connectivity and true privacy.
TunTun VPN
Configuration TOML parsed by Android, iOS, and Linux:
# TunTun Client Profile private_key = "a8f3...[curve25519]" [server] endpoint = "vpn.knwldg.info:51820" public_key = "7c29...[server_noise_key]" [interface] routes = ["0.0.0.0/1", "128.0.0.0/1"] mtu = 1420 manage = true
Engineered to give you high-performance security without the typical trade-offs in battery life, connection stability, or speed.
Seamlessly hands over your connection as you move between home Wi-Fi, office networks, and cellular 5G towers. Active downloads, video calls, and SSH sessions continue uninterrupted without reconnect pauses.
Your private cryptographic keys are generated locally on your smartphone and never sent to any server, database, or administrator. Even in the event of cloud compromise, your traffic remains cryptographically indecipherable.
Integrates directly into the operating system's native networking layer. Zero unnecessary background wake-locks, minimal CPU consumption, and negligible battery impact throughout your day.
Built on the Noise Protocol Framework (Noise_IK) with Curve25519 Diffie-Hellman key exchange and in-place ChaCha20-Poly1305 authenticated encryption for maximum software speed on ARM mobile processors.
On our edge server infrastructure, TunTun bypasses legacy OS network overhead to process packets directly from hardware queues. Delivers wire-speed line rates and sub-millisecond data forwarding for low-latency gaming and streaming.
TunTun edge nodes enforce cryptographic access locally. If central control systems or orchestration planes undergo maintenance, existing subscriber tunnels remain connected without disruption.
How TunTun pairs your mobile device with edge gateway nodes for instantaneous, private network transit.
Packets leave your apps through the operating system's native virtual TUN interface at standard MTU (1420 bytes) with automatic TCP MSS clamping to prevent fragmentation.
Each packet is encrypted in-place using ChaCha20-Poly1305 with authenticated session framing, eliminating unnecessary memory copies.
Edge nodes inspect the session tag and route the decrypted payload directly to the upstream destination with microsecond response times.
TunTun VPN is available now for Android and iOS. Native desktop editions for Linux, macOS, and Windows are in Early Access.
Fast, modern native Android interface with adaptive theme support and seamless low-power background connectivity.
Seamless native iOS integration engineered for zero-leak privacy and hardware-accelerated encryption.
Headless daemon with systemd integration and high-performance native TUN interface.
Native desktop menu bar companion with instant connection toggle and system proxy routing.
High-performance Wintun network adapter integration with leak-proof Windows service core.
