DSVPN

github.com/jedisct1/dsvpn VPNs Open-source projectOpen source

Create a VPN between a client and server across untrusted or restricted networks with DSVPN.

github.com/jedisct1/dsvpn
DSVPN homepage screenshot

About DSVPN

DSVPN creates a VPN link between a client device and a server across an untrusted or restricted network, with the server providing onward access to the internet. It runs over TCP, including port 443, and connects with one command on each side using a shared secret key stored on both machines.

It uses no configuration file and requires no manual firewall or routing rules. It works on Linux with kernel 3.17 or newer, macOS and OpenBSD, with DragonFly BSD, FreeBSD and NetBSD in client and point-to-point modes. It blocks IPv6 on the client, and a DNS resolver reachable only from the local network may not work through the VPN.

Key features

  • Runs over TCP, including port 443 for restricted networks
  • Uses a shared secret key stored on client and server
  • Connects with a single command on each side
  • Operates without a configuration file or manual routing rules
  • Blocks IPv6 on the client to prevent IPv6 leaks
  • Small codebase around 25 KB with no external dependencies
Best for: People who run their own server and want a command-line client-to-server VPN on Linux or macOS.
Good for
  • No configuration file or manual firewall and routing setup
  • Small and constant memory footprint without heap allocations
  • Uses modern cryptography with formally verified implementations
Watch out for
  • A DNS resolver only accessible from the local network may not work through the VPN
  • DragonFly BSD, FreeBSD and NetBSD work in client and point-to-point modes
  • Linux support requires kernel 3.17 or newer

DSVPN at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Platforms
Linux, macOS
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

DSVPN alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

WireHole

github.com/IAmStoxe/wirehole

WireHole combines WireGuard, Pi-hole, and Unbound in a Docker Compose project for a managed VPN with ad blocking and DNS caching.

Windscribe

windscribe.com

Windscribe provides a VPN service that describes privacy protection, location masking, and access to global content across servers in more than 130 locations.

Popular in VPNs

Well-known listings from the same topic.

All 93

DSVPN FAQ

How is the shared secret created?
Create a 32-byte file with dd if=/dev/urandom of=vpn.key count=1 bs=32 and copy it to both the server and the client.
How do the server and client connect?
Run a server command such as sudo ./dsvpn server vpn.key auto 1959 and a client command such as sudo ./dsvpn client vpn.key 34.216.127.34 1959, then use Ctrl-C to disconnect.
What happens to DNS through the VPN?
A DNS resolver only accessible from the local network will not be accessible through the VPN, so use a public resolver, a local resolver, or DNSCrypt.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing