TOCICI

VPNs & TUN/TAP Devices

We support TUN/TAP interfaces 1), and they are automatically configured when your VPS is built.

The related character device file is located at: /dev/net/tun

The following software can be used for VPN with TUN/TAP:

GRE & PPTP

Support for GRE within an OpenVZ container (guest) is still being evaluated for production deployment; as it has proven less than stable in testing. While it is not officially supported, we do have limited means of providing support. If you would like to utilize GRE based VPNs, please open a ticket requesting this specific feature, and we'll do our best to assist you.

We're also hesitant to support PPTP/PPP, as the concept of PPTP being a secure communications is flawed; PPTP does not provide confidentiality nor true encryption of your data. PPTP relies on protocols being tunneled to provide privacy, and it doing so, PPTP only provides a false sense of security. For these reasons, support for PPTP is also considered a beta/unstable feature.

Secure Alternative to PPTP & GRE

We support OpenVPN, through the TUN/TAP service. OpenVPN is a free and open source virtual private network (VPN) program designed for creating point-to-point and/or server-to-multiclient encrypted tunnels between computers of varying platforms; Linux, Mac OS & Windows.

OpenVPN uses the OpenSSL library to provide encryption of both the data and control channels. It lets OpenSSL do all the encryption and authentication work, allowing OpenVPN to use all the ciphers available in the OpenSSL package. OpenVPN is considered to be extremely secure when compared to a PPTP VPN, and not only is OpenVPN in use by hundreds of our customers, OpenVPN has proven itself far more stable.

Experimental Support for PPTP & GRE

We are currently evaluating third-party patches which promise stable and secure support for PPTP/GRE connections.

Aside from gaining access to a feature rarely supported in the VPS market. Any VPS hosted in this experimental testing environment is also permitted to transfer twice as much data, for the duration of time that a VPS is hosted within this experimental environment.

We are always seeking additional testers, although to be included, please understand that:

  1. We cannot offer any guarantee of uptime, reliability, or security.
  2. Outages are rare, but have been unplanned. We will do our best to minimize outages.
  3. All requests for inclusion will be considered on a case-by-case basis; we're looking for patient and detailed technical experts that are able to provide constructive feedback.
  4. With limited server space, there is no guarantee that we'll be able to accommodate your request for inclusion.
  5. Due to the additional technical overhead, and resulting demands upon our staff, we cannot offer any discounts, credits or refunds for VPSes using this experimental feature.

If you'd like to be considered for inclusion in this beta program, please email us two paragraphs outlining your goals, existing VPS experience levels, and your expectations. At the end of your email, please include the text

I understand that there is no guarantee of uptime, reliability, or security for any VPS which uses these services. In the event of service interruptions, I understand that I am not eligible for any credits of refunds. I agree that if I am demanding, or otherwise not professional and civil in my communications, that I will lose the privilege of being a tester. I understand that loss of this testing privilege means my VPS will be immediately migrated back into the mainline production environment, where PPTP/GRE support may not be available.

We will respond to complete requests for inclusion within one business day. If accepted, you will have direct access to system engineers, and will be expected to provide detailed feedback in a civil, businesslike and professional manner. If you cannot do this, your VPS will be migrated back into the mainline production environment, no service credits or refunds will be issued.