What Is OpenConnect? Open-Source VPN Protocol

May bypass restrictionsAvailable on SHP

OpenConnect is an open-source VPN protocol compatible with Cisco AnyConnect. Learn how it works and how to use it on SHP.

DeveloperDavid Woodhouse (client); Nikos Mavrogiannopoulos (ocserv server)
First releasedFirst released in 2009
Current statusActively maintained
LicenseOpen source (LGPLv2.1 client / GPLv2 server)
Independent auditNone
Why it was createdBuilt as an open alternative to the closed Cisco AnyConnect client, which lacked smartcard support and proper Linux packaging.
How it worksIt opens an HTTPS session with the server, then layers a TLS or DTLS tunnel on top, so the traffic pattern resembles ordinary web browsing.
Censorship resistanceModerate — can bypass simple DPI
Setup time~15 min
SpeedModerate

Works on your devices

Desktop, mobile, TV boxes and routers — where this protocol runs natively vs. needs a workaround.

Desktop & Mobile

WindowsSupported
macOSSupported — Homebrew
iOSSupported
AndroidSupported
LinuxSupported

TV & Streaming

Android TVSupported — Sideload APK
Fire TV StickSupported — Sideload APK

Routers

MikroTikModel-dependent
KeeneticSupported

Explore other protocols