PAGES
← all tools
◆ Secure Access (VPN / SASE / ZTNA)

vopono

0.10.22 open-source

vopono runs applications through VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. tunnels via temporary network namespaces, letting you route select apps through different VPNsVPNsA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. simultaneously.

Summary

vopono is an open-source command-line tool that runs individual applications through VPN tunnels using temporary network namespaces, so a handful of programs can each use a different VPN while the rest of the machine stays on the normal connection. It ships killswitches for both WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer. and OpenVPN, and it targets people managing their own multi-VPN setups rather than teams provisioning access for others, supporting providers like Mullvad, ProtonVPN, NordVPN and AirVPN directly, plus custom OpenVPN, WireGuard, OpenConnect and SSH-based configs. It sits in the secure-access space alongside general namespace-based VPN routing setups rather than any named competitor. First committed in 2020, it has 30 contributors and a release 26 days ago, showing active maintenance.

vopono runs applications through VPN tunnels via temporary network namespaces, letting you route select apps through different VPNs simultaneously.

How vopono helps

Which of my applications are actually going out through which VPN right now?

lists each running namespace with its assigned provider and exit connection, so a browser on one VPN and a chat client on another can be confirmed at a glance instead of assumed

Can my other traffic keep going out my normal connection while a couple of programs use a different exit point?

isolates each wrapped application in its own network namespace, so only the processes launched inside it are rerouted while everything else on the machine stays on the default route

Will my traffic actually stop if one of these tunnels drops?

holds the killswitch on that namespace so its applications lose connectivity entirely rather than falling back to the normal route when a WireGuard or OpenVPN link goes down

Which provider and region is a given running application actually exiting through?

records the connection each namespace was launched with, so a browser session can be traced back to the exact provider and location it was assigned instead of guessed from memory

Did a network drop leave one of my tunnels stuck instead of reconnecting?

sets a keepalive on WireGuard connections by default so a lapsed link is more likely to recover on its own rather than sit silently disconnected

all 14 features, with the evidence for each →

Languages

Not documented

Features

14 capabilities

Built from vopono's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What vopono offers you

  • Command-line interface6
  • JSON data export1
All capabilities 14 capabilities
VPN protocol routing and tunnelling shipped Routes traffic through VPN tunnels including WireGuard, AmneziaWG, and SSH dynamic proxies, with support for split-tunnelling, killswitch protection, and per-protocol IPv4/IPv6 routing. 18 releases · 6 other sources · first seen Aug 2020

Also counts toward: Command-line interface

release 18 total

  • Improves IPv6 handling in network namespaces (carried over from unpublished 0.10.20). 0.10.21 · Aug 2026 · source · release history
  • Improves custom WireGuard and AmneziaWG configuration compatibility with support for split-tunnel AllowedIPs, independent IPv4/IPv6 routing, hostname endpoints, endpoint bypass routes, and safe handling of wg-quick-specific options. 0.10.19 · Jul 2026 · source · release history
  • Improves custom WireGuard and AmneziaWG configuration compatibility: split-tunnel AllowedIPs, independent IPv4/IPv6 routing, hostname endpoints, endpoint bypass routes, and safe handling of wg-quick-specific options. 0.10.19 · Jul 2026 · source · release history
  • Adds SSH dynamic proxy support via --protocol ssh and redsocks, transparently routing IPv4 TCP and DNS traffic through an OpenSSH SOCKS5 proxy with killswitch protection, SSH config aliases, keys, and agent support. 0.10.19 · Jul 2026 · source · release history
  • Adds initial AmneziaWG protocol support, including automatic protocol detection from config files. 0.10.16 · Apr 2026 · source · release history
  • Sets a default WireGuard PersistentKeepalive when missing to improve recovery after network drops. 0.10.16 · Apr 2026 · source · release history

docs

  • Runs applications through VPN tunnels via temporary network namespaces, allowing per-app VPN routing without affecting the main connection.

example

  • Allow a service inside vopono's namespace to reach the host's DNS resolver directly. vopono --open-hosts 127.0.0.53 0.9.0 · Apr 2022 · source
  • Enable the new Shadowsocks protocol for Mullvad to add an alternative connection method. vopono sync --provider=mullvad --protocol=shadowsocks 0.3.0 · Aug 2020 · source
  • Run Firefox through AzireVPN Norway vopono exec --provider azirevpn --server norway firefox
  • Run Chromium through ProtonVPN Sweden vopono exec --provider protonvpn --server sweden chromium-browser
  • Run Firefox through Mullvad Sweden vopono exec --provider mullvad --server se firefox
Network namespace lifecycle management shipped Manages the persistence of network namespaces, allowing them to remain open after target processes terminate. 8 releases · 3 other sources · first seen Oct 2020

Also counts toward: Command-line interface

release 8 total

  • Supports propagating the exit code of the wrapped application back to the calling process. 0.10.15 · Sep 2025 · source · release history
  • Adds --create-netns-only CLI argument to create the network namespace without starting VPN traffic 0.10.8 · Jan 2024 · source · release history
  • Added --custom-netns-name to override the network namespace name generation 0.10.1 · Jul 2022 · source · release history
  • Adds $VOPONO_HOST_IP and $VOPONO_NS_IP env vars to expose the host and namespace IPs during runtime 0.9.1 · May 2022 · source · release history
  • Switch custom provider network namespace and veth link names to use the hash of the config filename 0.8.9 · Dec 2021 · source · release history
  • Current lockfiles are incompatible with postup/predown settings; running namespaces must be killed before upgrading 0.7.0 · Apr 2021 · source · release history

example

  • Create an isolated network namespace for tools like firejail to attach to, without establishing the VPN tunnel. vopono --create-netns-only 0.10.8 · Jan 2024 · source
  • Set a deterministic network namespace name for scripting or debugging sessions. vopono --custom-netns-name my-vpn-ns 0.10.1 · Jul 2022 · source
  • Keep the vopono namespace alive after the torrent client exits, allowing other tools to access the forwarded ports. vopono run --keep-alive transmission-daemon 0.5.0 · Oct 2020 · source
GUI for VPN configuration management shipped Provides a graphical interface for managing VPN configurations, flagging missing files, removing stale launch entries, and passing protocol selections when starting a session. 7 releases · 2 other sources · first seen Aug 2020

release 7 total

  • Improves vopono-gui handling of custom VPN configurations: missing files are clearly marked, stale launch configurations can be deleted, and the selected protocol is passed explicitly when launching. 0.10.19 · Jul 2026 · source · release history
  • Adds initial vopono-gui for launching and monitoring vopono from a desktop GUI, including gamepad controls for Steam Deck testing and status discovery support in vopono_core (currently tested on XOrg). 0.10.17 · May 2026 · source · release history
  • Forwards GUI/X11/Wayland environment variables to daemon-launched applications and uses the connecting user's XDG config directory in daemon mode. 0.10.16 · Apr 2026 · source · release history
  • Adds ~/.config/vopono/config.toml config file to save default options 0.6.10 · Apr 2021 · source · release history
  • Adds automatic protocol detection for custom config files (OpenVPN or Wireguard) 0.5.0 · Oct 2020 · source · release history
  • Adds servers subcommand to list available server configuration files with a given prefix 0.4.0 · Aug 2020 · source · release history

example

  • Start vopono with a custom config without specifying the protocol explicitly; it will now detect OpenVPN or Wireguard automatically. vopono run --config /path/to/custom.conf 0.5.0 · Oct 2020 · source
  • List all available ProtonVPN server configs to pick one for connection. vopono servers protonvpn 0.4.0 · Aug 2020 · source
Linux package installation and daemon management shipped Installs the tool via Debian and RPM packages, registers and reloads the systemd service on installation, and presents instructions for enabling the background daemon. 6 releases · 1 other source · first seen Aug 2020

release

  • Improves Debian and RPM packaging by installing the systemd service, reloading systemd after installation, and displaying daemon enablement instructions. 0.10.19 · Jul 2026 · source · release history
  • Mullvad OpenVPN support has been removed; any vopono setup using Mullvad over OpenVPN will no longer function after upgrading. 0.10.16 · Apr 2026 · source · release history
  • Removes Mullvad OpenVPN support, reflecting Mullvad's discontinuation of the service. 0.10.16 · Apr 2026 · source · release history
  • New daemon command enables running the vopono daemon as root (e.g. via systemd) without requiring sudo on the calling user. 0.10.15 · Sep 2025 · source · release history
  • Requires appending +pmp to the OpenVPN username in ~/.config/vopono/proton/openvpn/auth.txt. 0.10.7 · Nov 2023 · source · release history
  • Checks added that necessary tools are installed (openvpn, wireguard-tools, shadowsocks-libev, nmcli (if NetworkManager installed)) 0.3.0 · Aug 2020 · source · release history

example

  • Run the vopono daemon as a systemd service so network namespaces persist without per-command sudo. vopono daemon 0.10.15 · Sep 2025 · source
Port forwarding capability shipped Enables forwarding of ports from inside a network namespace to the host machine. 5 releases · 2 other sources · first seen Oct 2020

release

  • Adds WireGuard port forwarding support for AzireVPN. 0.10.11 · Dec 2024 · source · release history
  • Adds --custom-port-forwarding {protonvpn,pia} flag to indicate which provider's implementation to use for custom Wireguard config files 0.10.9 · Mar 2024 · source · release history
  • Adds PrivateInternetAccess port forwarding support 0.10.8 · Jan 2024 · source · release history
  • Added --protonvpn-port-forwarding argument to enable port forwarding for ProtonVPN. 0.10.7 · Nov 2023 · source · release history
  • Adds port forwarding capability for accessing services inside the network namespace 0.5.0 · Oct 2020 · source · release history

example

  • Use custom port forwarding with ProtonVPN Wireguard configs vopono --custom-port-forwarding protonvpn up 0.10.9 · Mar 2024 · source
  • Enable port forwarding for ProtonVPN connections using the new flag. vopono connect --protonvpn-port-forwarding 0.10.7 · Nov 2023 · source
Connectivity and health checking shipped Performs automated checks for network connectivity, daemon health, and DNS resolution at startup or on demand. 2 releases · 3 other sources · first seen Apr 2026

Also counts toward: Command-line interface

release

  • Adds vopono check subcommand to run daemon connectivity and health checks covering IPv4, IPv6, and DNS lookups. 0.10.22 · Aug 2026 · source · release history
  • Adds a connectivity check for the selected network interface at startup. 0.10.16 · Apr 2026 · source · release history

example

  • Inspect daemon status as JSON vopono daemon status --json
  • Sync ProtonVPN OpenVPN configs vopono sync --protocol openvpn protonvpn
  • Set up VPN provider configuration files vopono sync
TCP proxy for port forwarding shipped Provides a built-in TCP proxy server to forward network namespace ports to the host machine. 2 releases · 2 other sources · first seen Oct 2020

release

  • Adds namespace-specific forwarding exceptions to active DOCKER-USER and UFW forward chains when using nftables, improving Docker/UFW firewall compatibility. 0.10.17 · May 2026 · source · release history
  • Adds a built-in TCP proxy server for forwarding network namespace ports to the host machine 0.5.0 · Oct 2020 · source · release history

example

  • Allow the vpono tunnel to reach services on the host machine's loopback interface. vopono --allow-host-access 0.10.1 · Jul 2022 · source
  • Add custom DNS entries for services running on the host. vopono --hosts 'internal.local 192.168.1.10' 0.9.0 · Apr 2022 · source
Host network access configuration shipped Enables the network namespace to connect directly to specific hosts, localhost ports, or host services via loopback. 3 releases · 1 other source · first seen Apr 2022

Also counts toward: Command-line interface

release

  • Adds vopono.host entry to the hosts file in the network namespace (available when --allow-host-access is used) for resolving host services like http://vopono.host:80 0.10.10 · Mar 2024 · source · release history
  • Added --allow-host-access flag to allow accessing ports on the localhost (usually via the IP address 10.200.1.1) 0.10.1 · Jul 2022 · source · release history
  • Adds --open-hosts argument to allow direct connections from the network namespace to certain hosts 0.9.0 · Apr 2022 · source · release history

example

  • Allow the vpono tunnel to reach services on the host machine's loopback interface. vopono --allow-host-access 0.10.1 · Jul 2022 · source
Cloudflare Warp support shipped Provides connectivity via the Cloudflare Warp protocol in addition to standard VPN providers. 3 releases · first seen Nov 2023

release

  • Adds AirVPN WireGuard config syncing support via API key through vopono sync. 0.10.21 · Aug 2026 · source · release history
  • Adds AirVPN Wireguard config syncing support (with API key) 0.10.21 · Aug 2026 · source · release history
  • Added provisional support for Cloudflare Warp. 0.10.7 · Nov 2023 · source · release history
Scriptable output formats shipped Provides structured data output for external consumption by scripts and automation tools. 2 releases · 1 other source · first seen Aug 2026

Also counts toward: Command-line interface, JSON data export

release

  • Adds --json flag to most commands for programmatic/scriptable output. 0.10.21 · Aug 2026 · source · release history
  • Adds --json flag to most commands for programmatic usage 0.10.21 · Aug 2026 · source · release history

example

  • Parse vopono output in scripts without string splitting vopono status --json | jq '.active_server' 0.10.21 · Aug 2026 · source
Network topology information exposure shipped Exposes environment variables for host and namespace IPs to facilitate dynamic traffic routing or proxy configuration. 2 releases · 1 other source · first seen May 2022

release

  • Adds $VOPONO_FORWARDED_PORT environment variable when using --port-forwarding or --custom-port-forwarding to expose the mapped port inside the namespace 0.10.10 · Mar 2024 · source · release history
  • Adds $VOPONO_HOST_IP and $VOPONO_NS_IP env vars to expose the host and namespace IPs during runtime 0.9.1 · May 2022 · source · release history

example

  • Use the new environment variables inside an entrypoint script or command to dynamically route traffic or configure local proxies based on the container's internal IP. echo "Container IP: $VOPONO_NS_IP" && curl -s http://$VOPONO_HOST_IP/api/status 0.9.1 · May 2022 · source
Custom pre/post hook scripts shipped Allows users to execute external scripts immediately after network namespace creation or before its destruction via configuration keys. 2 releases · 1 other source · first seen Apr 2021

release

  • Adds --port-forwarding-callback script support for ProtonVPN port forwarding, receiving the port number as $1 0.10.9 · Mar 2024 · source · release history
  • postup and predown config keys accept paths to scripts run after namespace creation or before destruction 0.7.0 · Apr 2021 · source · release history

example

  • Execute a callback script when the port forwarding is established vopono --port-forwarding-callback /usr/local/bin/my_callback.sh up 0.10.9 · Mar 2024 · source
DNS resolution management shipped Configures DNS settings within the network namespace to allow access to the host's resolver or custom entries. 2 other sources · first seen Apr 2022

example

  • Allow a service inside vopono's namespace to reach the host's DNS resolver directly. vopono --open-hosts 127.0.0.53 0.9.0 · Apr 2022 · source
  • Add custom DNS entries for services running on the host. vopono --hosts 'internal.local 192.168.1.10' 0.9.0 · Apr 2022 · source
Sudo askpass integration shipped Supports executing privileged commands via an external askpass helper program to manage sudo authentication. 1 release · 1 other source · first seen Dec 2021

Also counts toward: Command-line interface

release

  • Adds -A <path> argument to specify sudo askpass program path 0.8.10 · Dec 2021 · source · release history

example

  • Execute a command with sudo via an external askpass helper vopono -A /usr/bin/your_askpass exec ifconfig 0.8.10 · Dec 2021 · source

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for vopono, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail vopono puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Show

23 entries

  1. August 20262
  2. July 20261
  3. May 20261
  4. April 20261
  5. September 20251
  6. December 20241
  7. March 20242
  8. January 20241
  9. November 20231
  10. July 20221
  11. May 20221
  12. April 20221
  13. December 20212
  14. May 20211
  15. April 20212
  16. October 20202
  17. August 20202
    Show

    23 entries

    Project health

    Issue, contributor and maintainer activity in jamesmcm/vopono, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 8 +4 vs prior 12 months
    2. Maintainers 2 +1 joined · −1 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 83% of issues opened, last 12 months
    5. Median time to close 2.1 days first maintainer reply 21 hours
    6. Open backlog 84 of 248 issues ever filed
    1. Issues opened / month 3 · 2 communitymaintainers
    2. Open backlog 84
    3. Contributors / month 3
    4. Commits / month 6
    5. Stars 1,339
    Issue themes, last 12 months
    • bugs 4%
    • features 8%
    • other 88%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Libraries its release ships

    What its latest release locks, checked against known advisories.

    None of its release's images build from a lockfile we can read.

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →