
conf) files that can be used by Tunnelblick. Pretty much every VPN service provides OpenVPN configuration (.ovpn and. This last allows you to run OpenVPN over TCP port 443, which is a great way to defeat censorship blocks (although horribly inefficient from a technical standpoint). This includes port selection, cipher selection, cipher bit-length selection, and the choice of running OpenVPN over User Datagram Protocol (UDP) or Transmission Control Protocol (TCP). Simple edits to the OpenVPN configuration file(s) allow for a high level of customization (if supported by your provider). Get Tunnelblick Additional OpenVPN features Certainly, I detected no WebRTC leaks when testing Tunnelblick for this article. * OpenVPN 4.2.x protects against Web Real-Time Communication (WebRTC) leaks, so I presume Tunnelblick does too.
Tunnelblick vpn download how to#
Note that DNS leak protection is not enabled by default, and must be turned on (see How to use Tunnelblick later).
Tunnelblick vpn download full#

Tunnelblick offers the following features: Given how good Tunnelblick is (especially now that it features a kill switch), I do not see this as a problem.
Tunnelblick vpn download mac#
Small and new VPNs, in particular, often rely on Tunnelblick to provide Mac support. It is also worth noting that macOS is not quite as well supported by custom VPN clients as Windows is.

It is also bloat-free and stable, which is more than be said for many custom VPN apps. This means that Tunnelblick is more secure than many custom clients, which can lag behind in this area. Open source aside, Tunnelblick always stays up-to-date with the latest version of OpenVPN, and the latest security patches for it. Open Source VPN Clients for my full thoughts on this issue.

Now… I am usually a very strong advocate for using open source software, but I have doubts about its value when it comes to VPNs, as your VPN provider has full access to your internet traffic anyway. Most commercial VPNs offer custom Mac VPN apps, so why use Tunnelblick VPN? One reason is that it is open source, so you can be fairly confident that it is not doing anything it shouldn’t.
