AmneziaVPN is a multi-protocol VPN client that can install and configure a VPN server on your own machine over SSH, then connect using obfuscated protocols built to resist blocking.
AmneziaVPN is a VPN client whose headline feature is deployment: you supply an address, an SSH login, and a password, and it installs the server software on your machine and configures the connection for you. From there the same application acts as the everyday client, listing available protocols and letting you switch between them without reinstalling anything. It speaks familiar protocols such as OpenVPN and WireGuard, and adds obfuscated variants, including its own AmneziaWG, that are designed to survive deep packet inspection. The result is a self-hosted VPN that a non-specialist can set up in a single sitting.
Not everyone wants to run a server, and AmneziaVPN does not force that choice: the same client can also connect to the project's own hosted service or to an existing configuration. What sets it apart from a general-purpose client is the bias toward deployment and censorship resistance rather than protocol archaeology. Anyone who only needs to import a subscription and pick a node will find a desktop tool such as NekoRay more direct, because it assumes the server already exists and concentrates on profiles, groups, and routing. Amnezia's workflow assumes the opposite: you have infrastructure, or you are willing to rent it, and the client handles the rest.
The main benefit of AmneziaVPN is that it removes the two hardest parts of a private VPN: installation and blocking resistance. Provisioning happens over SSH, with the necessary components installed on the remote machine and the client configuration generated automatically, so you do not need to follow a long tutorial about certificates and routing tables. Because several protocols can be installed side by side, a blocked protocol is an inconvenience rather than a dead end: switch to another one from the same interface and keep working. Obfuscation options disguise VPN traffic as ordinary web activity, which is what keeps a connection usable on networks that actively detect tunnels. Kill switch, custom DNS, and split tunneling cover the practical concerns, and the open code means the parts that touch your credentials can be inspected rather than trusted.
Key capabilities and highlights.
Give AmneziaVPN the server address and SSH credentials and it installs the required components remotely, then builds a matching client configuration. That turns a task normally involving several manuals and a text editor into a short wizard.
Install OpenVPN, WireGuard, IKEv2, AmneziaWG, XRay Reality, and Shadowsocks-based options together, then choose which one the client uses. If one protocol stops working on a hostile network, another is already waiting, so recovery does not depend on reaching the server through the blocked route.
AmneziaWG is a modified WireGuard implementation that removes the predictable packet patterns filters look for, keeping the performance benefits while making the tunnel far harder to identify and block by automated inspection. It is the protocol worth trying first on networks that throttle or drop conventional VPN traffic.
The XRay Reality option presents traffic as though it belongs to a legitimate website, which is effective in environments where VPN protocols are actively hunted. It is configurable from the same client and needs no separate installation on your machine.
Decide which destinations use the tunnel instead of routing everything through it, adding individual sites or whole applications to the VPN list. That keeps local services fast and avoids sending traffic abroad for no reason.
A kill switch blocks traffic if the tunnel drops, preventing leaks at the moment they are most likely. The bundled DNS option resolves queries through the VPN, which stops a local resolver from revealing where you are going.
Bring an existing configuration into the client or export one you have just created, including the parameters needed to set up the same server again. That makes it practical to reconnect a second machine or hand a working setup to someone else.
When you use AmneziaVPN to manage your own server, the credentials and configuration stay on your device rather than being uploaded, and the client's source is available for anyone who wants to verify that claim.
Browse historical releases and previous builds.
Common questions about AmneziaVPN.
It creates and manages a VPN on a server you control, then connects to it from the same application. Instead of subscribing to somebody else's service, you rent or own a machine, hand the client the access details, and it installs and configures everything.
You need a server and its SSH credentials, which most hosting providers supply when you rent one. AmneziaVPN then performs the installation itself, so the usual steps of installing packages, generating keys, and writing configuration files are handled for you.
It covers OpenVPN, WireGuard, and IKEv2 for standard use, plus obfuscated options: AmneziaWG, OpenVPN over Cloak, Shadowsocks-based OpenVPN, and XRay Reality. They can be installed together on one server and selected from the client at any time.
Networks that filter traffic can recognise the handshake patterns of ordinary VPN protocols and block or throttle them. Obfuscated variants alter those patterns so the connection resembles normal web traffic, which keeps it usable where a plain WireGuard or OpenVPN tunnel would fail.
Yes. Because the server configuration is created by the client, it can be exported and imported elsewhere, or the client can connect to the same server using the saved details. Multiple devices can therefore share one self-hosted server.
By default it can, but split tunneling lets you decide. You can route only selected sites through the tunnel, or restrict it to specific applications where that option is available, leaving the rest of your traffic on the ordinary connection.
For self-hosted use, the project states that no data about you or your server is collected, and that the credentials you enter are used only to reach and configure the machine. Configurations stay on your device, and the code is published so the behaviour can be checked.
The client itself is free to use, and self-hosting costs only whatever your server provider charges. The project also operates paid and free hosted services that connect through the same application, which is an option for people who would rather not manage a server.
AmneziaVPN is a multi-protocol VPN client that can install and configure a VPN server on your own machine over SSH, then connect using obfuscated protocols built to resist blocking.
v2rayN is a desktop GUI that drives Xray, sing-box, and other proxy cores, letting you import subscriptions, test server latency, choose routing rules, and enable system proxy or TUN mode from one window.
Pritunl Client is a VPN client that connects computers to OpenVPN and WireGuard servers, giving administrators and remote workers one interface for importing profiles, switching organizations, and keeping encrypted tunnels reliably connected.
sing-box is a configurable proxy platform that runs as a single binary, accepting traffic through inbounds, matching it against routing rules, and forwarding it through outbounds that can speak dozens of protocols.
Clash Verge Rev is a desktop GUI for the Mihomo rule-based proxy core, letting you import subscription profiles, switch nodes, edit rules visually, and route traffic through system proxy or TUN mode.
Comments