With up to 25k MAUs and unlimited Okta connections, our Free Plan lets you focus on what you do best—building great apps.
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Try free now
Secure File Transfer for Windows with Cerberus by Redwood
Protect and share files over FTP/S, SFTP, HTTPS and SCP with the #1 rated Windows file transfer server.
Cerberus supports unlimited users and connections on a single IP, with built-in encryption, 2FA, and a browser-based web client — all deployable in under 15 minutes with a 25-day free trial.
Value Added OpenVPN over SNI via SNI injection SSL/TLS Tunnel
How It Works
[Android Device]
│
│ OpenVPN TCP/UDP
▼
[SNI Tunnel Client] ← Wraps traffic in SSL + injects fake SNI
│
│ Looks like: HTTPS → microsoft.com ✓
▼
[ISP Firewall] ← Passes through — sees only valid HTTPS
│
▼
[VPS Server] ← Decrypts TLS, recovers OpenVPN traffic
│
▼
[OpenVPN Server] ← Receives native OpenVPN traffic
│
▼
Internet
The core trick is SNI injection: the tunnel client inserts a trusted domain name (e.g. microsoft.com) into the TLS handshake. The ISP sees what appears to be a standard HTTPS connection and allows it through. The VPS server on the other end strips the SSL wrapper and forwards the real OpenVPN packets to the OpenVPN server.
Value Added Warp over SNI via SNI injection SSL/TLS Tunnel
How It Works
[Android Device]
│
│ WireGuard UDP
▼
[SNI Tunnel Client] ← Wraps UDP in TLS/ssl + injects fake SNI
│
│ Looks like: HTTPS → microsoft.com ✓
▼
[ISP Firewall] ← Passes through — sees only valid HTTPS
│
▼
[VPS Server] ← Decrypts TLS, recovers WireGuard UDP
│
▼
[Cloudflare Warp] ← Receives native WireGuard traffic
│
▼
Internet
The core trick is SNI injection: the tunnel client inserts a trusted domain name (e.g. microsoft.com) into the TLS handshake. The ISP sees what appears to be a standard HTTPS connection and allows it through. The VPS server on the other end strips the TLS wrapper and forwards the real WireGuard packets to Cloudflare.