A VPN tunnel is the encrypted connection between your device and a VPN server that carries all your device's network traffic.
Explanation
The word "tunnel" is metaphorical — the traffic still travels the same public internet, but wrapped in encryption so intermediate networks cannot inspect it. VPN tunnels use specific protocols: WireGuard, OpenVPN, IKEv2, or older options like L2TP and PPTP. Each protocol packages the traffic differently and has different tradeoffs on speed, security, and firewall traversal. Modern default is WireGuard for speed and simplicity. The tunnel encrypts everything from your device to the VPN server; from server to destination, ordinary internet routing applies (HTTPS destinations get their own TLS on top). If the tunnel drops mid-session, a VPN kill switch blocks all traffic until the tunnel reconnects — preventing accidental leaks.
Related terms