SoftEther VPN

SoftEther VPN optimizes performance by using full Ethernet frame utilization, reducing memory copy operations, parallel transmission, and clustering.

SoftEther VPN Client runs on Windows, Linux, and macOS.

It serves mobile devices running iOS, Android, and Windows Phone via L2TP/IPsec.

A Virtual Layer-3 Switch has layer-3 IP static routing functions like a physical router.

A local bridge is the layer-2 packet-switching fabric between a physical Ethernet network-adapter and a Virtual Hub.

In response to the unavailability of the VPNGate iOS Client in some countries like Turkey, VPNGate.Online has released an alternate version.

This ensures users worldwide can benefit from the secure and unrestricted browsing experience that VPNGate offers, regardless of their location.

vpncmd is the CUI administrative tool for SoftEther VPN Server, Client and Bridge.

Since the Virtual Network Adapter works as if it were the physical one, any applications or operating system components can be used without any modification.

Several Virtual Layer-3 Switches can be created on a single VPN Server instance.

The Virtual Layer-3 Switch is useful to make a large-scale site-to-site VPN network.

Although the easy way to make a site-to-site VPN network is to build the layer-2 bridging based VPN, if the number of computers is huge the number of broadcasting packets will increase to load the inter-site links.

To prevent that scaling problem, the VPN administrator isolates IP networks by Virtual Layer-3 switch.

The administrator can define a cascade connection between local or remote Virtual Hubs.

Therefore, the cascade connection function is used to build the site-to-site layer-2 Ethernet bridging.

One of the key features of SoftEther VPN is the transparency for firewalls, proxy servers, and NATs (Network Address Translators).

In an environment such as a slow and delaying network, this performance tuning will result in a faster throughput.

When this function is enabled, the logical VPN Session will consist of several TCP (HTTPS) connections.

This fast-switching optimization to determine the processing TCP connection enables high throughput.

Traditional VPN systems require the user to ask the firewall's administrator of the company to open an endpoint (TCP or UDP port) on the firewall or NAT on the border between the company and the Internet.

In order to reduce the necessity to open an endpoint on the firewall, SoftEther VPN Server has the NAT Traversal function.

The SoftEther VPN server architecture
The forwarding database (FDB) of a Virtual Hub
Firewall, proxy, and NAT transparency