What's New

Server selection and redundancy

• New server picker: every location with its latency, load, and how well your own connection reaches it.
• Servers your network cannot reach are ranked down automatically, so the top of the list is always the best one for you.
• The server button now names the country in use, and the server you pick stays for the session.
• Locations known to be censored are marked, and confirmed before use.
• Connecting starts from the saved server list instead of waiting on a network request first.
• If our main address is blocked, the app now reaches the API through the VPN servers themselves — several routes are tried at once and the fastest one wins. A fresh install can do this before its first connection.
• Update checks travel that same path, so P4PN can tell you a newer TestFlight build exists even when the website is unreachable.
• Servers from an imported profile file appear in the usual server picker, with latency and accessibility measured from your own network.
• Improved connection diagnostics: the app now reports the full connection story, so support can see what went wrong without asking you for logs.

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification implemented

• Exit IP verification implemented

Connection verification simplified

• Connection check now just confirms the tunnel carries traffic
• Removed the country mismatch indicator

Country verification

• Connection is now verified through our own server instead of a third-party service
• Shows a marker when the exit country cannot be verified
• Automatically restores normal routing if connection verification fails

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers