Top Sites>IIndex - eduVPN

User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

Sitemap: https://www.eduvpn.org/sitemap.xml
Sitemap: https://www.eduvpn.org/sitemap.rss

Generated by All in One SEO v4.9.6.2, this is an llms.txt file, used by LLMs to index the site.

# eduVPN

Secure Internet Access for R&E

## Sitemaps

- [XML Sitemap](https://www.eduvpn.org/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Case study: Ca’ Foscari University of Venice boosts remote access with eduVPN](https://www.eduvpn.org/case-study-ca-foscari-university-of-venice-boosts-remote-access-with-eduvpn/) - Ca’ Foscari University of Venice has adopted eduVPN for its remote-access service, improving security, ease of use and federated integration. Stefano Claut, System Administrator at Ca’ Foscari University of Venice told us more. In recent years, at Ca’ Foscari we have faced the need to rethink our VPN (Virtual Private Network) service. The existing solution,
- [eduVPN case study: University of Turku improved the performance and security of remote access systems](https://www.eduvpn.org/eduvpn-case-study-university-of-turku-improved-the-performance-and-security-of-remote-access-systems/) - As of January 2026, more than 230 universities and research institutions use eduVPN as their corporate VPN solution. But why did they choose this software? We asked Tuukka Vainio from the University of Turku about this.
- [Extending secure access to academic resources with eduVPN](https://www.eduvpn.org/extending-secure-access-to-academic-resources-with-eduvpn/) - A trusted VPN solution for research and education institutions worldwide Sometimes, access to university resources can be restricted to on-campus networks due to licensing terms, access controls and security policies. This limits availability for students, researchers and staff working remotely, travelling or based offsite. Institutions looking to extend secure access to their digital resources can
- [Does it scale?](https://www.eduvpn.org/does-it-scale/) - With the ongoing global COVID-19 crisis, many people need to start working from home. Typically, the use of a VPN is required to be able to keep working. Many current VPN solutions used by institutions can not cope with this situation, either due to hardware, software or license restrictions. eduVPN is a credible solution which does not
- [OpenVPN and Modern Crypto (Part III)](https://www.eduvpn.org/openvpn-and-modern-crypto-part-iii/) - Previously, and earlier, we looked at modernizing the TLS configuration of OpenVPN. However, TLS is not the only cryptography used by OpenVPN. There’s also the data channel. This post will look into using another data channel encryption algorithm to see whether it can be beneficial for OpenVPN performance and under what circumstances. There are a number
- [eduVPN GDPR Overview](https://www.eduvpn.org/eduvpn-gdpr-overview/) - This overview aims to give an insight into the legal/GDPR roles connected to the entities participating in the service eduVPN. It is part of the eduVPN legal project funded by NLnet. The overview is made in cooperation with GÉANT, SURF and the eduVPN-team. Complementary to the overview there will be a listing of detailed actions
- [OpenVPN and Modern Crypto](https://www.eduvpn.org/openvpn-and-modern-crypto/) - We decided to investigate what it would take to modernize the cryptography used to establish the TLS control channel with OpenVPN. See our current configuration documentation as used by eduVPN. The reason for looking into this is to get improved security and increased performance, when switching to TLSv1.3 and possibly switching key type. This is relevant for the
- [eduVPN Privacy Overview](https://www.eduvpn.org/privacy-overview/) - GÉANT facilitates the eduVPN service. As such, it is responsible for the role of providing coordinative oversight – both technical and organizational – to enable delivery of the service. Part of the aforementioned role is to ensure this General Privacy Overview Statement remains accessible and is updated regularly. The full privacy statement can be downloaded
- [Raising cybersecurity awareness through hands-on engagement at Maker Faire Rome](https://www.eduvpn.org/raising-cybersecurity-awareness-through-hands-on-engagement-at-maker-faire-rome/) - In October 2025, the Italian research and education network GARR used Maker Faire Rome, the European edition of the worldwide maker event, as a platform to raise awareness about cybersecurity and promote eduVPN within the research and education community. The initiative aimed to make complex security concepts understandable to a broad audience and to highlight
- [macOS firewall intermittently blocks VPN after sleep](https://www.eduvpn.org/macos-firewall-intermittently-blocks-vpn-after-sleep/) - At SURF, a mix of Linux, macOS, and Windows laptops use eduVPN every day. About two years ago the eduVPN GÉANT support team began receiving sporadic reports from macOS users: “eduVPN doesn’t work after laptop suspend.” The problem was intermittent and hard to pin down. During testing, it even disappeared for a while, only to
- [GARR launches new eduVPN service for secure connections worldwide](https://www.eduvpn.org/garr-launches-new-eduvpn-service-for-secure-connections-worldwide/) - The new eduVPN service is now officially available for Italian students, teachers and researchers to browse protected, wherever they are. Designed for those who study, teach or work in the academic or research field, eduVPN allows you to browse in complete safety even outside of university buildings or research institutions, protecting your data from potential
- [Exploring eduP2P: A Peer-to-Peer VPN Proof-of-Concept](https://www.eduvpn.org/1444-2/) - Traditional client-server VPNs, such as eduVPN, route all client data through a centralized server. While this model is effective for many users, it has notable limitations. Geographical distance between users and the central server can result in increased latency and reduced throughput, adversely affecting performance, especially for bandwidth-intensive or real-time applications. Client-server VPNs deployed by
- [How to deploy eduVPN](https://www.eduvpn.org/how-to-deploy-eduvpn/) - Up-to-date documentation for the deployment of eduVPN is available at Documentation
- [Running WireGuard over TCP - A Solution for UDP blocking issues](https://www.eduvpn.org/running-wireguard-over-tcp-a-solution-for-udp-blocking-issues/) - Starting from eduVPN version 3.x, we added WireGuard support in addition to OpenVPN. WireGuard brings a number of improvements over OpenVPN: Smaller codebase, easier to understand, debug and validate Support for modern crypto protocols only Better throughput (https://www.wireguard.com/performance/) Support in the Linux kernel However, a problem with WireGuard is that it is more prone to
- [Scoring an old vulnerability](https://www.eduvpn.org/scoring-an-old-vulnerability/) - Scoring an old vulnerability In 2021, we identified a flaw in the eduVPN server software, which we chose to report publicly through https://cveform.mitre.org/. This CVE can be briefly summarized as: arbitrary file read access for an authenticated user, and it was registered under the number: CVE-2021-41583. Detailed summary of CVE-2021-41583 The vulnerability CVE pertains to
- [Investigating P2P VPN with eduVPN](https://www.eduvpn.org/investigating-p2p-vpn-with-eduvpn/) - The team behind eduVPN is keen on keeping eduVPN focussed and lean and not to add too many features. However, one of the features we have envisioned for some time is the possibility to support peer-to-peer VPNs. The main benefit of peer-to-peer VPNs is the increased efficiency when transfering (large amounts of) data between systems
- [Academic input improves eduVPN](https://www.eduvpn.org/academic-input-improves-eduvpn/) - Over the years, students have played an important role in the development of eduVPN. Last year we had three students working on various eduVPN improvements. We are very pleased that one of them, Jeroen Wijenbergh, who developed a state machine as the core of eduVPN apps is since end 2022 officially part of the eduVPN
- [eduVPN & GDPR, an overview](https://www.eduvpn.org/eduvpn-gdpr-an-overview/) - eduVPN distinguishes between two main categories of usage: Institute Access and Secure Internet. Institute Access refers to accessing protected resources within an organisation – like a corporate VPN; the goal of Secure Internet is to access the public internet from a trusted server. For institute access, complying with data protection legislation is rather trivial: the
- [New Linux Client](https://www.eduvpn.org/new-linux-client/) - We are happy to announce the new eduVPN Linux client. A major change, from a coding perspective, is that the Linux client now primarily based on the eduvpn-common Go library [https://github.com/eduvpn/eduvpn-common]. This library was written from scratch to include all functionalities the eduVPN client should have and is in respect to the previous Python based
- [Audits on eduVPN](https://www.eduvpn.org/audits-on-eduvpn/) - eduVPN and its various components are regularly audited by external companies. The major refactoring which led to the third major version of the eduVPN server, and the development of a shared library for the eduVPN clients, required new audits. At the end of 2022 we asked third parties to review both the eduVPN server software and
- [Preview features in eduVPN 3.x](https://www.eduvpn.org/preview-features-in-eduvpn-3-x/) - eduVPN has kept evolving since the release of 3.0 on 25 May 2022. And you can check the roadmap for what's coming. We've introduced the concept of "Preview Features" that allow us to experiment with specific new features as requested by organizations. We can now release some features, check that they are really useful, collect
- [OpenVPN and Modern Crypto (Part II)](https://www.eduvpn.org/openvpn-and-modern-crypto-part-ii/) - Last year we decided to investigate the OpenVPN client support of TLSv1.3 and EdDSA (Ed25519). One reason for doing this is, to stay current with algorithm recommendations by experts and move away from RSA. As EdDSA is easier to implement securely and has built-in protections against attacks that other curves, most notably, the NIST curves, do not have, there are fewer things
- [eduVPN on the curriculum  - Building the next generation of developers](https://www.eduvpn.org/eduvpn-on-the-curriculum-building-the-next-generation-of-developers/) - Over the last few years, students have played a crucial role in the development of eduVPN. Since 2016, 14 students coming from Fontys University of Applied Sciences, Radboud University, University of Amsterdam, and University of Twente have worked on eduVPN as part of their bachelor or master. In practice, these students were interns at SURF
- [eduVPN 3.0 is out and now supports WireGuard](https://www.eduvpn.org/eduvpn-3-0-is-out-and-now-supports-wireguard/) - eduVPN 3.0 was released on 25 May 2022. This third major version aims to make eduVPN even easier to scale to large organisations with a high number of concurrent users. In particular, it is now possible to use either OpenVPN or WireGuard for eduVPN connections. As mentioned previously, supporting WireGuard came with challenges. This specific
- [eduVPN philosophy: less code means a more secure service](https://www.eduvpn.org/eduvpn-philosophy-less-code-means-a-more-secure-service/) - In 2014, eduVPN started as a small project to provide students and employees with a reliable VPN solution that integrates with federated authentication. Currently more than 100 organizations worldwide use eduVPN. An important event in 2014 greatly influenced the development of eduVPN, and led us to embrace an important principle: less code means a more
- [First Policy Draft](https://www.eduvpn.org/first-policy-draft/) - On one hand eduVPN is a full open-source project, leveraging any organisation to deploy a large scale VPN service themselves. On the other side we're actively working to make eduVPN an official GÉANT service. Aiming to make eduVPN the default VPN "standard" like eduroam is for WiFi. Based on the November eduVPN workshop and eduroam
- [Access your institute's network or the internet using an encrypted connection](https://www.eduvpn.org/access-your-institutes-network-or-the-internet-using-an-encrypted-connection/)
- [Level of Encryption and OAuth Info](https://www.eduvpn.org/level-of-encryption-and-oauth-info/) - François Kooman, eduVPN lead developer, created an overview of the used eduVPN crypto. Also an overview of how OAuth is being used in eduVPN is available here.
- [Get your VPN Server in the Apps](https://www.eduvpn.org/get-your-vpn-server-in-the-apps/) - To make eduVPN easier to use, and allow users to select the VPN server they want to connect to, it makes sense to have them registered to be listed in the official eduVPN apps. This post is meant for institutes or NRENs setting up their own VPN server, not for end-users of eduVPN. In order
- [First NREN Deploy](https://www.eduvpn.org/first-nren-deploy/) - SURFnet will be the FIRST NREN offering eduVPN as a service to its constituency. Institutes in the Netherlands will be able to replace their current VPN concentrators by a centrally hosted cloud-like managed eduVPN service. The official launch date is scheduled for July 1st, 2017.
- [Status](https://www.eduvpn.org/status/) - eduVPN integrates smoothly with federation services via SAML and currently most effort is put on creating easy-to-use and secure apps for Android, iOS, Windows and macOS. The server side components have been released end 2016. In December it was decided to support federated eduVPN as an additional feature to eduVPN. This will allow a user
- [Background](https://www.eduvpn.org/background/) - eduVPN is an initiative of SURFnet, NORDUnet, DeiC and AARNet to make VPN technology commonly available, by building better and more user-friendly tools. Security wise eduVPN will raise the bar in comparison with other VPN solutions. The joint effort is aimed at making eduVPN as "The VPN standard" for the NREN community. The Vietsch Foundation
- [Slides & Policy eduVPN at TNC19](https://www.eduvpn.org/slides-policy-eduvpn-at-tnc19/) - Today we presented eduVPN at the TNC19 side meeting. You can download the general eduVPN presentation, as well as the discussed policy 1.0 document: eduVPN eduVPN Policy 1.0 For some more technical details about the eduVPN 2.0 release and the roadmap for what eduVPN 3.0 will be like: eduVPN 2.0 eduVPN Roadmap Don't forget to join us tomorrow afternoon
- [eduVPN Workshop](https://www.eduvpn.org/eduvpn-workshop/) - In November we organized a two-day eduVPN workshop at SURFnet office in the Netherlands. This goal of the workshop was to bring together representatives of NRENs who are currently deploying the service in production and in test and to see how we can work together in the future. Topics addressed during this workshop were: "The
- [Won ISOC.nl Innovation Award 2018](https://www.eduvpn.org/won-isoc-nl-innovation-award-2018/) - eduVPN is a brand name we use for the educational & research community. For the software we're developing we use the name: Let's Connect! Let's Connect! has won the ISOC.nl Innovation Award 2018. The Jury said: A very necessary technical innovation with potentially a huge social impact. For secure connections, but also for free internet, we are
- [iOS App Available](https://www.eduvpn.org/ios-app-available/) - The eduVPN apps for Windows, macOS and Android have been available for quite a while. It took us more time to release an iOS app. The difficulty was we could not use OpenVPN 2.x GPL software because of Apple policies. Fortunately, Private Internet Access has created an OpenVPN compatible "clone" which we have audited and
- [eduVPN Deployment at the Leibniz-Supercomputing Centre](https://www.eduvpn.org/eduvpn-deployment-at-the-leibniz-supercomputing-centre/) - Building a multi-institute VPN solution for Munich’s 130,000 user community The Leibniz-Supercomputing Centre (Leibniz Rechenzentrum, LRZ) is the computing center of both Munich Universities of Excellence: Ludwig-Maximilians University and Technical University Munich and a National Supercomputing Centre. The LRZ operates the Munich Scientific Network (MWN) for all universities and other research institutions in the greater
- [PHP-SAML-SP: A simple method for SAML integration, audited and released!](https://www.eduvpn.org/php-saml-sp-a-simple-method-for-saml-integration-audited-and-released/) - As demonstrated several times (latest in this video [https://youtu.be/yBItHovq4AU]), it only takes a few minutes to deploy an eduVPN server. What typically takes more time is the discussion concerning the user groups to define in the eduVPN server and how to integrate this (like firewall settings, identity management aspects, Active directory integration) with the IT services provided internally.
- [Taming WireGuard in eduVPN](https://www.eduvpn.org/taming-wireguard-in-eduvpn/) - WireGuard is a new, relatively simple VPN technology implemented the “right way”. This means, no shortcuts were taken by the developers. Keep it simple was the motto and they were not afraid to do some plumbing. Two examples of this were integrating WireGuard directly in the Linux kernel whilst also updating the kernel’s cryptography stack. The
- [Uninstall the macOS app](https://www.eduvpn.org/uninstall-the-macos-app/) - Upgrading from the non-App Store eduVPN for macOS installation to the version from the App Store, a residual "helper service" and some application data that will never be used anymore are left on the system. You can either run the script using a "one liner" from the Terminal: bash
- [TNC18 workshop](https://www.eduvpn.org/tnc18-workshop/) - At TNC18 a two hour eduVPN workshop was organised. The presentations of this workshop are available below: GEANT-eduVPN eduVPN-TNC18
- [VPN Product and Technology Comparison](https://www.eduvpn.org/vpn-product-and-technology-comparison/) - Introduction The eduVPN service is positioned as the VPN service for the international research and education community. We were inspired by eduroam to offer a secure and privacy enhancing VPN solution to as many researchers and students as possible. We aim to have endpoints in as many locations as we have collaborating National Research and Education Networks (NRENs). In
- [New eduVPN macOS app in App Store](https://www.eduvpn.org/new-eduvpn-macos-app-in-app-store/) - A new eduVPN macOS app is now available from the Apple App Store. This new version has been designed for macOS 10.14 and 10.15 and is based on the source code of our iOS app. The big advantage of this client is the native integration with macOS via the Apple NetworkExtension framework. This improves the
- [Institute Access Deployment](https://www.eduvpn.org/institute-access-deployment/) - A number of research and education institutions in Europe, Asia and Africa have chosen to use eduVPN as their enterprise VPN solution. eduVPN has several advantages, in particular, it does not suffer from any license limitation. But how is eduVPN deployed in practice by institutions in a research and education context? There are three ways to deploy
- [New eduVPN Servers](https://www.eduvpn.org/new-eduvpn-servers/) - As of September 2019, two additional countries are available to the users of the eduVPN applications: Finland, operated by FUNET, and France, operated by RENATER. In addition, in October, Morocco and Sri Lanka were added! eduVPN servers are now available in 11 countries. This means that research and education users from those countries can access Internet
- [NORDUnet Technical Workshop 2019](https://www.eduvpn.org/nordunet-technical-workshop-2019/) - Today we presented eduVPN at the NORDUnet Technical Workshop. You can download the presentations here: Introduction eduVPN @ SURFnet SAML & eduVPN Policy 2.0 If you have questions or feedback, please let us know at eduvpn-support@lists.geant.org or see Contact for other means to contact us!
- [Mellon (SAML) Support Status](https://www.eduvpn.org/mellon-saml-support-status/) - Recently, during the upgrades to eduVPN 2.0, we've been having some trouble with the mod_auth_mellon Apache module. The Debian package generates invalid signatures over AuthnRequest messages which wasted a lot of time debugging (issue reported to the Debian package maintainer)... Mellon does NOT properly support eduPersonTargetedID (serialization) Mellon does NOT check the "scope" of attributes against the IdP metadata attribute. This is not a
- [Lessons learned: Upgrade to eduVPN 2.0](https://www.eduvpn.org/lessons-learned-upgrade-to-eduvpn-2-0/) - As announced, on May 14th we started the upgrade to eduVPN 2.0. It didn't all go as smooth as hoped, but also not totally unexpected due to the complexity of the upgrade scenario. The option to perform a clean installation was only taken by the Norwegian server operator by setting up a server in parallel before and "migrating" to
- ["Secure Internet" Upgrade to eduVPN 2.0](https://www.eduvpn.org/secure-internet-upgrade-to-eduvpn-2-0/) - On May 14th, all participating Secure Internet eduVPN servers will be upgraded to 2.0. This has to be done at the same time as the used OAuth tokens format changed. We chose to not create a backwards compatible layer as the number of servers is currently still quite limited. For future upgrades we won't have this luxury anymore
- [eduVPN 2.0 Server](https://www.eduvpn.org/eduvpn-2-0-server/) - Today eduVPN 2.0 server has been released. This new server version has been engineered to be more robust. Based on experiences in the field, like how we managed group-membership, we have decided to change a few components. The current eduVPN client apps (Windows, macOS, Android, iOS) are fully compatible with the new server. Two factor (2FA) authentication
- [Download eduVPN](https://www.eduvpn.org/download-eduvpn/)
- [Secure Internet Access](https://www.eduvpn.org/secure-internet-access/) - With the rise in public WiFi, more and more students and staff are accessing information across potentially insecure networks, risking their data being accessed and shared. eduVPN provides a low-cost, secure way to preserve privacy when using public networks using easy to use software on laptops, mobile phones and tablets.
- [Secure Remote Institutional Access](https://www.eduvpn.org/secure-remote-institutional-access/) - Today many thousands of students, staff and researchers work away from the main campus yet still need access to central services and data. Until now, providing this type of secure access has been either difficult or very expensive with the need to purchase and support commercial VPN solutions and software. Using eduVPN allows secure eduGAIN
- [eduVPN Software Updates](https://www.eduvpn.org/eduvpn-software-updates/) - We have recently released newer eduVPN app versions: iOS app (bug fixes) for iOS the OpenVPN app is currently needed Android app (bug fixes like 2FA authentication) Linux client (bug fixes) macOS app (bug fixes, 2FA enrollment, 2FA authentication) Windows app (newer OpenVPN version included)
- [Audits](https://www.eduvpn.org/audits/) - In order to make sure the eduVPN software is safe and secure we've asked the Digital Security Group of Radboud University to review our software architecture and the eduVPN server source code. This audit was finished recently and fortunately only some minor issues were found. The Windows eduVPN client was recently audited by Fox-IT (NCC
- [In The Media: GÉANT blog & In The Field](https://www.eduvpn.org/in-the-media-geant-blog-in-the-field/) - Two articles about eduVPN that were recently published: In the Field stories GÉANT blog
- [eduVPN Beta Apps](https://www.eduvpn.org/eduvpn-beta-apps/) - The eduVPN app for Android was released in January 2017. Recently there are (beta) apps available for Windows and Linux as well. The Windows installers, which should work for Windows 7, 8 and 10 are available here: https://github.com/Amebis/eduVPN/releases/ For Linux only the latest Ubuntu, Debian and Fedora releases are supported. More info about how to
- [eduVPN](https://www.eduvpn.org/eduvpn/) - eduVPN enables students, employees and researchers to connect securely and encrypted to the Internet from any standard device. eduVPN integrates with the institutional network so that internal ICT services can be made available in a secure manner.

## Pages

- [Index](https://www.eduvpn.org/)
- [Blog](https://www.eduvpn.org/blog/)
- [About eduVPN](https://www.eduvpn.org/about-eduvpn/)
- [Contact](https://www.eduvpn.org/contact/)
- [Participants](https://www.eduvpn.org/countries/) - eduvpn@kenet.or.ke +254732150500
- [Running WireGuard over TCP - A Solution for UDP blocking issues](https://www.eduvpn.org/running-wireguard-over-tcp-a-solution-for-udp-blocking-issues/) - ​
- [Cookie Policy (EU)](https://www.eduvpn.org/cookie-policy-eu/)
- [Download](https://www.eduvpn.org/client-apps/)
- [Join](https://www.eduvpn.org/join/) - theh the
- [Documentation](https://www.eduvpn.org/documentation/)
- [Submit a blog post](https://www.eduvpn.org/submit-a-blog-post/)
- [What is a VPN?](https://www.eduvpn.org/what-is-a-vpn/)

## Custom Fonts

- [Open Sans](https://www.eduvpn.org/?bsf_custom_fonts=open-sans)

## Categories

- [Uncategorized](https://www.eduvpn.org/category/uncategorized/)
- [Blog](https://www.eduvpn.org/category/blog/)
- [Case Studies](https://www.eduvpn.org/category/case-studies/)

## Tags

- [2019](https://www.eduvpn.org/tag/2019/)
- [2020](https://www.eduvpn.org/tag/2020/)
- [2021](https://www.eduvpn.org/tag/2021/)
- [2022](https://www.eduvpn.org/tag/2022/)
- [2023](https://www.eduvpn.org/tag/2023/)
- [2024](https://www.eduvpn.org/tag/2024/)
- [2025](https://www.eduvpn.org/tag/2025/)
- [2026](https://www.eduvpn.org/tag/2026/)