Frequently asked questions

What is VeloTun?

VeloTun is a self-hosted VPN management panel compatible with OpenVPN® Community Edition for personal and commercial operators. Install it on your own Linux server to manage VPN users, device limits, data caps, presets, DNS, site-to-site tunnels, port forwarding, SOCKS5, SSL, licenses, and more from one dashboard.

Is VeloTun a VPN provider?

No. VeloTun is not a consumer VPN service like ExpressVPN or NordVPN. You install the panel on your own VPS/server and run infrastructure compatible with OpenVPN® protocol.

Who is VeloTun for?

Network operators, sysadmins, businesses connecting remote offices, and individuals who want full control over a private VPN network compatible with OpenVPN® protocol without hand-building configs.

What protocol does VeloTun use?

VeloTun is compatible with OpenVPN® protocol. Built-in presets (High DPI, Medium DPI, No DPI, Mobile Stable, Streaming, Low Latency, and more) apply cipher, MTU, TLS, and related options so you can deploy quickly.

Can I use it commercially?

Yes. Personal and commercial use share the same licensing and pricing.

Is there a free plan?

Yes. The Free plan includes 2 concurrent VPN connections and does not require a paid license key. Upgrade under Admin → License when you need more connections.

How much does a paid license cost?

Paid plans start at about USD $1.30/month depending on servers and concurrent connections. Use the License calculator on the site for an exact quote. Billing cycles: monthly, yearly, or lifetime.

How does licensing work?

One license key covers one panel server with your chosen concurrent connection limit. Order multiple keys if you need multiple panel servers. After payment, keys are emailed and shown in your account.

What happens if I hit my connection limit?

Connections beyond your licensed concurrent limit are rejected until a slot frees up or you upgrade/activate a higher plan.

What happens when a paid license expires?

The panel falls back to Free-plan limits (2 concurrent connections) until you renew or activate a new key.

How do I install VeloTun?

On Ubuntu 22+ or Debian 12+ with a public IP, run:

curl -fsSL https://velotun.com/install.sh | sudo bash

After install, open https://YOUR_SERVER_IP:8080 and log in as admin with the password printed by the installer.

How do I update without losing users?

Re-run the same install command. Updates keep your database, admin password, and settings.

Do I need an SSL certificate before installing?

No. The panel starts with a self-signed certificate. For a public domain, use Admin → Settings → SSL with Certbot after pointing the A record to your server (port 80 must be free for the challenge).

How do I create a VPN user?

Admin → Clients → Add New Client → set username, password, optional data limit / valid-until / device limit → Save. Copy credentials from the confirmation window and share the panel URL.

Where does the user get the .ovpn file?

Users log into the same panel URL with their VPN username and password, then download .ovpn or import by URL in OpenVPN Connect® (from OpenVPN Inc.). Admins do not need a separate export step for normal use.

Which VPN client app should users use?

OpenVPN Connect® (from OpenVPN Inc.) is commonly used for URL import and "Open in App". Any classic client compatible with OpenVPN® Community Edition can use the downloaded .ovpn file. VeloTun is not affiliated with OpenVPN Inc.

Can users create their own accounts?

No. Only the admin creates accounts. Users can download profiles and view their usage and sessions.

How do device limits work?

Per client you can set 1, 2, 3, 5, or unlimited devices (or use the Default Max Devices from VPN Defaults for new clients). This controls how many devices one account may use at once — separate from your license’s concurrent connection pool.

Can I set expiration and data limits?

Yes. Valid Until ends access after that day. Data Limit (MB) auto-suspends the account when used data reaches the cap. Empty fields mean unlimited.

How do I kick or ban a connected user?

Admin → Clients → Active Clients. Kick ends one session (reconnect allowed if still permitted). Ban suspends the account and ends all sessions.

How do I set DNS for all clients?

Admin → DNS → Custom DNS (e.g. 1.1.1.1,8.8.8.8) or Gateway DNS → Save. The VPN service restarts; ask users to reconnect.

How do I change VPN listen ports?

Admin → Settings → VPN Defaults → edit UDP Ports / TCP Ports → Save. Services compatible with OpenVPN® Community Edition restart automatically.

How do I change the panel (Web UI) port?

Admin → Settings → Web UI → change Web UI Port → Save. The panel restarts; open https://HOST:NEW_PORT afterward.

What are presets?

Presets are server-wide option packs for OpenVPN® Community Edition compatibility (cipher, MTU, TLS, compression, etc.). Choose one on first login or under Admin → Preset. Applying a preset restarts VPN service; clients may need new .ovpn files after major changes.

Does VeloTun support site-to-site VPN?

Yes. Admin → Network → Site-to-site tunnels. Create a peer, enable it, and download the peer .ovpn for the remote side.

Is port forwarding included?

Yes. Admin → Network → Port forwarding: map a WAN port/protocol to an internal dest IP/port, then Apply Rules.

Does it support SOCKS5?

Yes. Admin → Network → SOCKS5 outbound proxy (via redsocks). Scope can be VPN clients only or all traffic. UDP is typically not proxied through SOCKS5.

How do SSL certificates work for the panel?

Use self-signed by default, or Admin → Settings → SSL with Certbot for Let’s Encrypt (domain A record + free port 80). You can also set custom certificate/key paths under Web UI settings.

How do I back up settings?

Admin → Backup → Export Settings downloads portable JSON (subnet, ports, DNS, presets, etc.). On a new server, install VeloTun then Restore. This is not a full database/PKI disk image — keep credentials and off-server backups too.

What are useful velotun CLI commands?

sudo velotun status | start | stop | restart | logs | password | version
sudo velotun uninstall (keeps data)
sudo velotun purge (deletes data + config — permanent)

Forgot the admin password?

Try: sudo velotun password

If the credentials file was removed, recover from your offline copy of the first-install password. Avoid purge unless you intend to destroy all data.

Do I need to restart after every setting?

No. VPN-affecting settings (ports, subnet, DNS push, presets) restart the VPN service compatible with OpenVPN® Community Edition. Web UI port / SSL changes restart the panel. Soft settings like default max devices or VPN host alone often need no restart (host affects new .ovpn downloads).

What payment methods are supported?

Checkout uses our payment gateway with multiple methods on one page. After successful payment, license keys are issued automatically and emailed to you.

Do you offer refunds?

Yes, according to our Refund Policy. See the Refunds page or contact support@velotun.com.

How do I contact support?

Email support@velotun.com or use the Contact page on velotun.com.

Is VeloTun related to OpenVPN Access Server?

No. VeloTun is an independent panel that works with the free open-source OpenVPN® Community Edition. It is not OpenVPN Access Server and is not affiliated with OpenVPN Inc.