Tunnelblick helps you control OpenVPN® VPNs on macOS. It is Free Software that puts its users first. There are no ads, no affiliate marketers, no tracking — we don't even keep logs of your IP address or other information. We just supply open technology for fast, easy, private, and secure control of VPNs.

Tunnelblick comes as a ready-to-use application with all necessary binaries and drivers (including OpenVPN, easy-rsa, and tun/tap drivers). No additional installation is necessary — just add your OpenVPN configuration and encryption information.

To use Tunnelblick you need access to a VPN server: your computer is one end of the tunnel and the VPN server is the other end. For more information, see Getting VPN Service.

Tunnelblick is licensed under the GNU General Public License, version 2 and may be distributed only in accordance with the terms of that license.

OpenVPN is a registered trademark of OpenVPN Inc.

Highlighted Articles
News
Installing Tunnelblick
Uninstalling Tunnelblick
Setting up Configurations
Using Tunnelblick
Getting VPN Service
Common Problems
Configuring OpenVPN
Release Notes
Thanks
FAQ

Discussion Group
Read Before You Post

Important: See The Future of Tun and Tap VPNs on macOS for information about changes to future versions of macOS.

If you have an M1 Mac, also see Tunnelblick and Apple Silicon.

If you are using macOS Big Sur, you should use the latest beta version of Tunnelblick. You should allow Tunnelblick to automatically check for updates on the 'Preferences' panel of Tunnelblick's 'VPN Details' window. Be sure to put a check in 'Check for updates to beta versions'.

The following is the current status of issues that have been seen using Tunnelblick on macOS Big Sur.

To report an issue, please follow the instructions at Tunnelblick Issues.

FIXED in Tunnelblick 3.8.5beta03: Tunnelblick's Tun and Tap system extensions do not load.

If your configuration requires a Tun or Tap system extension, connecting to your VPN will fail if an appropriate system extension is not installed.

• If you are using a Tun VPN, you can — and should — modify your OpenVPN configuration file so it will work without the 'Tun' system extension. See Errors Loading System Extensions for instructions.
• If you are using a Tap VPN, your configuration requires a Tap system extension.

A future version of macOS will not allow the use of Tunnelblick's system extensions. See The Future of Tun and Tap VPNs on macOS.

See Installing System Extensions for detailed instructions on installing Tunnelblick's system extensions.

FIXED in Tunnelblick 3.8.5beta03: Tunnelblick disables loading of Tun and Tap system extensions.

When running on macOS Big Sur 11.0.1 or later, some versions of Tunnelblick force the settings on Tunnelblick's 'Advanced' settings window to 'never load' system extensions.

WON'T FIX: Sidecar does not work when a VPN is connected using Tunnelblick's default for a configuration.

(This issue is not specific to Big Sur. It is present in all versions of Sidecar.)

Sidecar does not work if IPv6 is disabled. By default, Tunnelblick disables IPv6 while a VPN is connected. This is done to prevent information leaks in common VPN setups (see A Glance through the VPN Looking Glass: IPv6 Leakage and DNS Hijacking in Commercial VPN clients).

To fix this problem:

1. Verify with your VPN service provider that no information is leaked if IPv6 traffic is allowed. If you cannot confirm that, you should not proceed and you will not be able to use Sidecar when your VPN is connected.
2. Launch Tunnelblick.
3. Click the Tunnelblick icon in the menu bar and then click 'VPN Details'.
4. Click on the large 'Configurations' button at the top of the window.
5. Select the configuration(s) you wish to modify.
6. Remove the check from 'Disable IPv6 unless the server is accessed via IPv6'.