OpenVPN is the veteran open-source VPN tunnel protocol — flexible, well-audited, and configurable over TCP or UDP.
Explanation
OpenVPN has been the standard for consumer and enterprise VPNs for over 15 years. It runs over TCP (443 typically, to blend with HTTPS traffic) or UDP (faster, less firewall-traversal-friendly). Configuration is highly flexible — cipher choice, key exchange, certificate authorities are all tunable. That flexibility is also the drawback: OpenVPN is heavier and slower than WireGuard, especially on mobile. For firewall traversal in restrictive networks, OpenVPN-over-TCP-443 has a long track record because the traffic looks superficially like HTTPS. Modern DPI systems fingerprint OpenVPN handshakes reliably, though.
Related terms