ocserv
The facts below are what the maker publishes about ocserv, checked and dated. Our editors have not written about it yet.
The facts
Each one read from ocserv's own pages, with the date it was checked.
What it does
- Access model
- vpnchecked 22 Sep 2026
- Accounting and management
- Connected users can be managed with occtl, and the manual describes RADIUS accounting support.checked 11 Oct 2026
- Admin control level
- standardchecked 22 Sep 2026
- Authentication
- It supports password authentication through PAM or a password file, as well as certificate authentication.checked 12 Oct 2026
- Client isolation
- Each client is isolated in a separate process with its own networking device and IP address.checked 12 Oct 2026
- Compatibility
- The manual says the server has been tested with the OpenConnect client and is also compatible with certain Cisco AnyConnect clients when compatibility options are configured.checked 11 Oct 2026
- Compression
- The feature list states that ocserv does not support compression.checked 12 Oct 2026
- Distribution
- Released versions are available as source tarballs, and the latest source code is available from the Git repository.checked 11 Oct 2026
- Downloads
- Released versions are available as FTP downloads, release tarballs are PGP-signed, and the server depends on GnuTLS.checked 12 Oct 2026
- Installation dependency
- The server depends on GnuTLS.checked 11 Oct 2026
- Integration options
- The project documents authentication setups for RADIUS, PAM, Kerberos, and FreeIPA.checked 12 Oct 2026
- IP support
- It supports both IPv4 and IPv6.checked 12 Oct 2026
- Key storage
- The server key can be stored in a TPM, hardware security module, or smart card.checked 12 Oct 2026
- License
- The manual states that the program is released under the GNU General Public License, version 2.checked 11 Oct 2026
- Networking limit
- ocserv does not perform packet forwarding or filtering between networks; the server needs the required routes or firewall rules configured.checked 12 Oct 2026
- Network support
- The server supports both IPv4 and IPv6.checked 11 Oct 2026
- Notable limit
- The features page lists no support for compression as a feature.checked 11 Oct 2026
- Privilege separation
- The authentication process is separated from worker processes, which run unprivileged.checked 12 Oct 2026
- Purpose
- ocserv is a GNU/Linux server that implements the AnyConnect SSL VPN protocol and is compatible with the OpenConnect VPN client.checked 12 Oct 2026
- Restart behavior
- Persistent cookie storage allows a seamless server restart.checked 12 Oct 2026
- Site-to-site networking
- Yeschecked 22 Sep 2026
- Support
- Users can ask for help on the project mailing list without subscribing, and posts must be plain text.checked 12 Oct 2026
- Tunneling
- It supports TCP and UDP VPN tunnels using TLS 1.2 and Datagram TLS, with TCP/TLS available as a backup if UDP is unavailable.checked 11 Oct 2026
Where it runs
- Supported platforms
- Linuxchecked 22 Sep 2026
Alternatives to ocserv
- 1

Tailscale
Free planOpen sourceAndroidiOSWebAPI9.4From $1 a month - 2

Windscribe
Free planOpen sourceAndroidiOSWebExtension9.1From $3 a month - 3

NetBird
Free planAndroidiOSLinuxmacOS9.0From €6 a month - 4
Twingate
Free planAndroidiOSWebAPI8.9From $5 a month - 5

GoodAccess
Free planAndroidiOSWebLinux8.8Free plan - 6

ZeroTier
Free planAndroidiOSWebAPI8.8From $18 a month
