Technology

Built on AmneziaWG

The modern, minimal, formally audited VPN protocol — wrapped in identity, NAT traversal, and policy.

Start free How OpenVLAN works
Sleek encrypted tunnel with a packet train gliding through

Small enough to audit, fast enough to forget

AmneziaWG is roughly 4,000 lines of code — compared to hundreds of thousands for legacy IPsec stacks. One considered crypto suite instead of a negotiation zoo. It roams from wifi to LTE mid-session without a reconnect ceremony, and runs at line rate on modest hardware. Boring, in the best possible way.

Start free How OpenVLAN works
tunnel — iperf3
AmneziaWGdirect path9.41 GbpsLINE RATE
AmneziaWGvia relay1.10 GbpsRELAY
ipsecsame hardware3.20 GbpsBASELINE
openvpnsame hardware0.28 GbpsBASELINE
Handshake in milliseconds; roaming survives IP changes.

What OpenVLAN adds on top

Raw AmneziaWG is a point-to-point tool. The platform makes it a network.

Vanilla AmneziaWG

  • ✓Manual key exchange between peers
  • ✓Hand-maintained config files
  • ✓All-or-nothing access per key
  • ✓NAT often requires port-forwarding
  • ✓No identity, no logs, no revoke story

OpenVLAN

  • ✓Automatic key management per device
  • ✓Mesh formed and healed automatically
  • ✓Identity-based ACLs per user & host
  • ✓NAT traversal with relay fallback
  • ✓SSO, SCIM, audit logs, MagicDNS

Frequently asked

Is AmneziaWG compatible with my existing tunnels?

Interoperability exists at the protocol level; most customers replace rather than bridge, since OpenVLAN manages keys automatically.

Which platforms are supported?

Linux, macOS, Windows, iOS, Android, and FreeBSD — the client list mirrors the downloads page.

Do you modify the protocol?

No protocol changes — OpenVLAN orchestrates standard AmneziaWG tunnels between your devices.

See all downloads →

Why we build on it

A codebase you can read

Roughly 4k lines versus hundreds of thousands in legacy stacks. Small surface, fast audits, fewer surprises.

Modern cryptography

One considered suite — Noise protocol, Curve25519, ChaCha20, Poly1305 — instead of a negotiation zoo from 2003.

Kernel-speed roaming

Silent handoffs between wifi and LTE mid-session. Tunnels stay up; nobody re-types a password on the train.

AmneziaWG's speed, enterprise controls

Try the difference identity makes on top of the fastest tunnel protocol around.

Get started Security & Trust Center