TLS Tunnel

TLS Tunnel is a free Android VPN app designed for users who need to bypass internet restrictions from ISPs or governments while keeping their browsing private. The official servers run TLSVPN, a unique TLS-based protocol that encrypts the connection with TLS 1.3 and optional TLS 1.2 support, similar to the encryption used by HTTPS sites. A self-signed certificate is verified when connecting, which helps prevent interception. No registration or payment is required to start using TLS Tunnel.

Core Features

The official TLS Tunnel servers handle any IPv4 protocol, so the app can be used for general browsing and many types of online services. Direct communication between users on the same server is possible through the generated IP address, but this feature is disabled by default to reduce security risks. For users who want more control, the Private Server option supports SSH connections through the standard method on port 22 or through custom connection text and SNI when the server accepts those connections.

Private Server Limits

Private servers connected through SSH only carry TCP traffic. If UDP data needs to be transmitted, the server must run a UDP gateway such as badvpn-udpgw; without it, some online games and services cannot be accessed. This limitation matters when choosing between official and private servers. TLS Tunnel itself is free, but users who do not own a server may pay to use third-party servers. The app is not responsible for private server issues, so any problems should be raised with the server owner.

How to Use TLS Tunnel

Inside the app, there are four connection methods: Default Method, Custom Payload, Custom SNI, and Custom Payload plus SNI. Custom Payload and Custom SNI are the most commonly used because they change the parameters sent during the TLS handshake and can make the traffic look like normal HTTPS requests. For the Custom SNI method, fill the SNI Host field with an active hostname that works on your network. For example, .instagram.com is often used when an operator gives Instagram traffic a separate data allowance.

After entering the SNI host, tap the logo in the upper right corner to open the SSH SSL account settings. You can create a free SSH SSL account at FastSSH.com, then enter those details back into TLS Tunnel. Return to the Home menu and tap Start to begin the connection. Wait a few seconds and open the Log menu to check whether TLS Tunnel has connected successfully.