Please be aware, though, that there may be security and stability issues with the early-access apps. If you are new to Linux or are concerned about your threat model, we recommend that you download the stable version of our Proton VPN Linux app.

How to install the stable version of the Proton VPN Linux app or CLI

Note that if you later wish to revert to using the stable version, you will need to uninstall the early-access app first. 

We officially support the early-access Proton VPN app for Linux on the following platforms:

• Debian 10 early access
• Ubuntu 20+ early access
• Mint 20+ early access
• MX Linux 19+ early access
• Kali Linux early access
• Elementary OS 6.0+ early access
• Fedora 31+ early access (not Rawhide)

We officially support the early-access Proton VPN command line tool (CLI) for Linux on the following platforms:

• Debian 10
• Ubuntu 18.04 (LTS)
• Mint 19.3+
• MX Linux 19
• Kali Linux
• Fedora 31+ (not Rawhide)

If you experience issues or have any other feedback when using our early-access Linux app or Linux CLI, please let us know. 

The post How to help test-run the early-access Proton VPN Linux app appeared first on Proton VPN Support.

This article aims to explain these metrics and how the TCP protocol — the way most data is transmitted over the Internet nowadays — impacts them. 

Sending off your data packets

Accessing the Internet is based on an exchange of information — when you shop online or stream a movie, your IP sends a flow of information in the form of data packets making a request. In turn, the receiver responds by sending back another flow of information, also in the form of data packets.

When using the TCP protocol, these data packets are transmitted in sequential order through a network of lanes to the destination —  when they reach their destination, a confirmation is sent back to your IP. Only a limited number of packets can be sent without receiving confirmation that the prior packets have reached their destination. 

At the same time, the amount of packets that can travel through the lane during a specific amount of time is also limited. The rate at which data packets can travel through the network is called bandwidth. 

However, bandwidth isn’t the only element that impacts your real Internet speed. A number of factors, including the physical distance to the destination, as well as any accidents that may happen down the road can delay the arrival to destination, and, ultimately, the confirmation. The time it takes for your packets to reach their destination is called latency.

Congestion on the highway

When each packet travels through the network, it passes through multiple nodes where it gets redirected toward its destination. When your packet arrives at a node at the same time as multiple other packets, it gets queued. 

Unfortunately, your packet could also drop or get lost at this stage and your IP won’t receive confirmation that it reached its destination. In this case, you will have to resend it, delaying the dispatch of the following packet.

These package losses alert the TCP protocol of delays in the transmission of data. To loosen up the traffic, the protocol automatically implements a mechanism (called the AIMD algorithm) that resends the lost packet at half the speed it would normally be sent.

This not only impacts the speed at which the lost packet is re-sent but the speed of the following packets as well — their speed incrementally increases only as traffic improves. 

Ultimately, this leads to delays in all your packets reaching their destination — even in the case of minor packet loss —, and, of course, getting a response to your request. The final number of data packets that can be exchanged on a network during a specific amount of time is called throughput. 

To calculate the maximum throughput on a TCP connection, you can use the Mathis formula and this online calculator.

VPN Accelerator

VPN Accelerator is unique to Proton VPN and comprises a set of technologies that can increase your VPN speeds by over 400% in certain situations. Thanks to this new technology, you can always enjoy the best possible VPN speeds when using our service.

One of the key technologies used by VPN Accelerator is a TCP delay-controlled TCP flow control algorithm called BBR. On longer paths or congested networks, BBR recovers faster from packet loss and also ramps up quicker (that is, it achieves maximum speed faster when a data transfer begins). VPN Accelerator is particularly effective at improving speeds over large distances.

Learn more about VPN Accelerator

The post How latency, bandwidth, and throughput impact Internet speed appeared first on Proton VPN Support.

Installing an APK is simple and should only take you 5 minutes. This guide will take you step-by-step the process.

What is an APK?

APK stands for Android Package file. As the name suggests, it contains the code of an app that was designed to run on the Android operating system.

How to install an APK

When you download an APK, your Android will automatically recognize it, which means you should be able to open it simply by tapping on the icon. However, just like running an unknown .EXE file can put your computer at risk, installing an unknown APK file can compromise your Android device. You should only install APK files from verified, trusted sources. 

For this reason, most Android devices will not let you install downloaded APKs by default.

Here’s how to bypass this default setting. Note: The titles of these menus and options may vary slightly, depending on your device.

• Go to Settings and tap on Security.
• In the Android Security Settings menu, you will see an option that says Unknown Sources with a checkbox next to it. If it is empty, that means your device will not execute an APK that did not come from the Play Store. Tap the empty box to allow unknown APKs.

• Your device will then show you a disclaimer that you alone are responsible for any damage an APK does to your device. Tap OK.

Once this is done, you are ready to install the Proton VPN APK. Once you download it on your device, you can find the APK file in your Download folder. Once you find the Proton VPN APK, simply tap it to begin the installation process.

The post How to install the Proton VPN APK appeared first on Proton VPN Support.

Unfortunately, there has been widespread overblocking, or blocking sites that are not meant to be covered by the DEA. This block has included the Proton VPN website. According to blocked.org.uk, we are currently being blocked by six British ISPs: 

• EE
• O2
• Sky
• TalkTalk
• Virgin Media
• Vodafone

We are currently working with these ISPs to remedy the situation. Fortunately, if you use one of these ISPs, there are steps you can take to access https://www.protonvpn.com in the meantime. Generally, you must sign in to your ISP account and turn off the age restriction option, but the steps are different for each ISP.

EE

To remove the block:

1. Log in to your My EE account.
2. Go to Menu -> Manage device.
3. Set your Content Lock to Off.
4. Also, please email safeguard@ee.co.uk to let them know that Proton VPN is being incorrectly categorized as inappropriate and should not be blocked.

If you are still having trouble, here is the EE Contact Us page. 

If you try to visit the Proton VPN website while the block is in place, you will see this page. You can get access to our site by clicking Log in or register if you are the bill payer of the EE account. If you are not the bill payer, click Enter credit card. You must enter a valid credit card number to prove you are over 18 years old.

O2

To remove the block:

1. Go to https://ageverification.o2.co.uk/ 
2. Enter your mobile phone number in the space and click Text me a code. O2 will then text you a code to proceed. (You must use a UK mobile number.)
3. Enter the code you received in the space.
4. You will then need to enter a valid credit card number to prove you are over 18 years old. Your card will be charged £1 which will then be refunded to you via a calling credit or your next phone bill. 
5. Once you have proven you are over 18, O2 will remove the block.

If you are still having trouble, or if you want to tell O2 that Proton VPN should not be blocked, dial 202 for customer support. It is free from O2 mobile phones. 

Sky

To remove the block:

1. Log in to broadbandshield.sky.com with your Sky ID.
2. Scroll down and click Switch off. It may take up to 15 minutes for the block to be disabled.

To allow individual websites:

1. Log in to broadbandshield.sky.com with your Sky ID.
2. Click the Block & allow websites tab.
3. Enter www.protonvpn.com in the Allow box and click Add.
4. Click Save all settings.

Also, please visit Sky’s portal for Miscategorized websites to let them know that Proton VPN is being incorrectly categorized as inappropriate and should not be blocked.

If you are still having trouble, here is the Sky Broadband Contact Us page.

TalkTalk

To remove the block:

1. Log in to My Account.
2. Navigate to the My services drop-down menu and click View HomeSafe settings
3. Turn Kids Safe Off. You see a prompt asking if you are sure. Click Turn Kidsafe OFF to confirm. It may take a few minutes for the block to be disabled.

If you still have trouble, here is the free TalkTalk support phone number: +44 0345 172 0088

Virgin Media

To remove the block:

1. Log in to My Virgin Media.
2. Click My Apps. 
3. Click WebSafe.
4. Click Settings.
5. Go to Child Safe and click Turn Off. Then click Apply. It may take up to five minutes for the block to be disabled. 
6. Also, please go to Virgin Media’s WebSafe Feedback site to let them know that Proton VPN is being incorrectly categorized as inappropriate and should not be blocked. 

If you are still having trouble, here is the Virgin Media Contact Us page.

Vodafone

To remove the block:

Using the My Vodafone website:

1. Log in to My Vodafone, navigate to the Services and extras grey drop-down menu, and select your device.
2. Scroll down and click Bars and Data Alerts. Under the Bars section, click Age-restricted content bar.
3. If you’ve verified your identity before, switch the toggle to Off and go to step 6. Otherwise, click Verify age.
4. You will need to enter a credit card number to prove you are over 18 years old. No payment will be taken.
5. Once you have verified your age, you will be taken back to your device menu. Scroll down and click Bars and Data Alerts. Under the Bars section, click Age-restricted content bar. Then switch the toggle to Off
6. Wait 10 minutes then restart your device.
7. Also, please email contentclassification@vodafone.com to tell Vodafone that Proton VPN is being incorrectly categorized as inappropriate and should not be blocked. 

If you are still having trouble, here is the Vodafone Contact Us page.

If you have difficulty reaching our website even after following these instructions, or if you are being blocked and do not see your ISP on this page, please contact our Support Team. 

The post How to bypass UK Internet service provider blocks and access Proton VPN appeared first on Proton VPN Support.

Below is a list of the oldest versions of the most popular browsers that we officially support. 

• Firefox: 78
• Chrome: 84
• Safari: 13.1
• Edge: 85
• Opera: 70
• iOS Safari: 12.2
• Chrome for Android: 85
  
• UC for Android: 12.12
• Samsung browser: 12.0

If you experience any errors with Proton VPN and you are using a browser version older than the ones listed above, please upgrade to the newest version of your browser:

If you are using a browser version that is more recent than those listed above and you are still encountering errors, please contact our Support team: https://protonvpn.com/support-form. 

The post What browsers can I use with Proton VPN? appeared first on Proton VPN Support.

You can access HBO shows as well as TNT, TBS, Cartoon Network, Adult Swim, CNN, all Warner Bros. and DC films on HBO Max.

Learn how to stream HBO.

Learn how to stream HBO Max.

The post How to unblock HBO Now with Proton VPN appeared first on Proton VPN Support.

Proton VPN’s native client app is the simplest way to install Proton VPN on your device. To guarantee the protection of your data we use OpenVPN protocol by default. Once installed you can start using Proton VPN right away. If you don’t yet have a Proton account, you can sign up for a Free plan for Windows. Below we also explain the steps you can take to uninstall Proton VPN.

Installing Proton VPN

To install Proton VPN, please follow these steps:

1. 1. Download the Proton VPN Windows app
   2. Go to your downloads folder and double click the protonvpn.exe installation file
      1. If a new window pops up asking “Do you want to allow this app to make changes to your device?”, click ‘Yes’
      2. If installing for the first time, the OpenVPN TAP adapter installation will appear. In the window, click ‘Next >
      3. During the installation process, installation of Windows .NET might be required as well. If prompted, follow the instructions to install Windows .NET as well.
   3. Click I Agree and then Next>
   4. Finally click Install
   5. Once the installer window is open, click install on the first screen. The installer will proceed with the process automatically
   6. Once installed, the Proton VPN application will start, and appear in a new window. A shortcut to the application will also appear on your desktop for the ease of access.

Uninstalling Proton VPN

You can uninstall Proton VPN by following these steps:

1. Right click the start button and press Programs and Features (located at the very top of the list)
2. Locate the Proton VPN app and press Uninstall
3. When a pop up window appears asking if you are sure you want to uninstall, click Yes

Related questions

How to use Proton VPN on Android?

How to use Proton VPN on Mac?

How to use Proton VPN on Linux?

How to change country/server selection?

The post How do I install and uninstall Proton VPN on Windows? appeared first on Proton VPN Support.

Note that we have a separate guide on How to set up Proton VPN on pfSense 2.4.5-*. 

Prerequisites for the pfSense VPN setup:

• Preconfigured and working pfSense 2.5.x-RELEASE
• A computer in the LAN network to access the pfSense frontend
• An OpenVPN configuration file. The configuration files can be downloaded in the Downloads section of your account

Step One: Add the Certificate

To use the pfSense OpenVPN client, you first need to add the Proton VPN certificate.

1. Open your browser and type in https://192.168.1.1 to open the pfSense frontend.

2. Log in to pfSense and go to System → Cert. Manager → Add.

3. Choose a Descriptive Name (for example, Proton VPN AG).

4. For Method, select Import an existing Certificate Authority.

5. Open the OpenVPN configuration file you downloaded earlier in a text editor and copy the certificate text. The certificate starts with —–BEGIN CERTIFICATE—– and ends with —–END CERTIFICATE—–.

6. Paste this certificate into the Certificate data field.

7. Click Save.

Step Two: Configure the OpenVPN Client

In this step, you will add an OpenVPN client to encrypt your data and tunnel it to the VPN server.

1. Go to VPN → OpenVPN → Clients and click Add.

2. Fill in the configuration fields as follows:

General Information

• Disabled: Unchecked
• Server Mode: Peer to Peer (SSL/TLS)
• Protocol: Either UDP on IPv4 only or TCP on IPv4 only (your choice)
• Device mode: tun – Layer 3 Tunnel Mode
• Interface: WAN
• Local Port: leave empty
• Server host or address: Enter the IP address of the server you wish to connect to. To do this, go to https://account.protonvpn.com/downloads, find the server you wish to connect to, and in its Actions column, click the ⋁ icon next to the Download button. Copy the server’s URL and use a DNS lookup tool to find its corresponding IP address. For example, Iceland Server #03 has the URL node-is-02.protonvpn.net, which corresponds to the IP address 185.159.158.50
• Server port: If Protocol is TCP, use 443. If Protocol is UDP, use 1194
• Proxy host or address: Leave empty
• Proxy port: Leave empty
• Proxy Authentication: Leave unchanged (none)
• Description: Choose a display name for this configuration (for example, Proton VPN IS-03 UDP).

User Authentication Settings

Note: These settings require your Proton VPN OpenVPN credentials, which are different from your regular Proton VPN login credentials. You can find your OpenVPN credentials in your Proton VPN account settings.

• Username: Your Proton VPN OpenVPN Username
• Password: Your Proton VPN OpenVPN Password
• Authentication Retry: Leave unchecked

Note: to enable additional features, add the following suffixes to your OpenVPN username.

• NetShield Ad-blocker: +f1
• NetSheild Ad-blocker advanced (available only if you have a paid plan, also blocks malware and trackers): +f2

For example, to enable NetSheild Ad-blocker, enter username+f1.

Cryptographic Settings

• Use a TLS Key: Checked
• Automatically generate a TLS Key: Unchecked
• TLS Key: Paste the key from the OpenVPN configuration file. The key starts with —–BEGIN OpenVPN Static key V1—–and ends with —–END OpenVPN Static key V1—–

• TLS Key Usage Mode: TLS Authentication
• TLS keydir direction: Direction 1
• Peer Certificate Authority: Proton VPN AG (or the descriptive name you used in Step One)
• Peer Certificate Revocation List: leave unchanged
• Client Certificate: None (Username and/or Password required)
• Data Encryption Negotiation: Checked
• Data Encryption Algorithms: AES-256-GCM, AES-128-GCM, AES-256-CBC
• Fallback Data Encryption Algorithm: AES-256-CBC (256-bit key, 128-bit block)
• Auth digest algorithm: SHA512 (512-bit)
• Hardware Crypto: Whether this is supported depends on your device. If it is supported, it must first be enabled by going to System → Advanced → Miscellaneous. If in doubt, select No hardware crypto acceleration.

Tunnel Settings

• IPv4 Tunnel Network: Leave blank
• IPv6 Tunnel Network: Leave blank
• IPv4 Remote network(s): Leave blank
• IPv6 Remote network(s): Leave blank
• Limit outgoing bandwidth: Leave blank, unless you prefer otherwise
• Allow Compression: Refuse any non-stub compression (Most secure)
• Topology: Subnet — One IP address per client in a common subnet
• Type of service: Leave unchecked
• Don’t pull routes: Leave unchecked
• Don’t add/remove routes: Leave unchecked

Ping Settings

Leave everything at their default settings.

Advanced Configuration

• Custom Options: Add the following:

tun-mtu 1500;
tun-mtu-extra 32;
mssfix 1450;
reneg-sec 0;
remote-cert-tls server;
pull;

• UDP Fast I/O: Checked
• Exit Notify: Disabled
• Send/Receive Buffer: Default
• Gateway creation: IPv4 only
• Verbosity level: 3 (recommended)

3. Click Save.

4. Go to Status → OpenVPN.

At this point, you should see the new VPN client with its Status showing up.

Step Three: Configuring the OpenVPN Interface

The VPN client is now running, but no traffic is being routed through it. To route all your network traffic through the secure Proton VPN tunnel, you need to configure the Interfaces and Firewall rules.

1. Go to Interfaces → Assignments.

2. From the OPT1 dropdown menu, select the VPN client you just added. In our example, this is ovpnc1 (Proton VPN IS-03 UDP). Click Save.

3. In the Interface column, click on OPT1 and fill out the fields as follows:

• Enable: Check
• Description: Name of the Interface (alphanumeric only). We will use Proton VPNIS03UDP.
• Block bogon networks: Check

Leave the rest of the fields unchanged.

4. Save and Apply the changes.

Step Four: Setting up the Firewall Rules

We use Firewall Rules to route everything through the Proton VPN interface we set up in Step Three.

1. Go to Firewall → NAT → Outbound.

2. Change Mode to Manual Outbound NAT rule generation, then Save and Apply the change.

3. Go to Mappings, and you will see 6 rules listed. In the Source column, 4 of these rules show the addresses 127.0.0.0/8 and ::1/128. Ignore these and Edit the other 2 rules by clicking on the pencil icon in the Actions column.

4. For both rules, change Interface to the Proton VPN Interface created in Step Three. In our example, this is ProtonVPNIS03UDP. Save and Apply the changes.

Mappings should now look like this:

5. Go to Firewall –> Rules –> LAN. You will see 3 rules. Disable the IPv6 rule and Edit the IPv4 rule by clicking on the pencil icon in the Actions column.

6. Scroll down and select Display Advanced.

7. Change Gateway to the previously created gateway (in our example, ProtonVPNIS03UDP_VNV4). Save and Apply the changes.

8. Go to Status → OpenVPN and Restart the client.

Step Five: Insert the correct DNS Servers for the pfSense VPN setup

All internet traffic passing through the pfSense firewall will now be routed through a Proton VPN server. However, DNS requests are not. To fix this, we need to change the DNS settings in pfSense.

1. Go to System → General Setup → DNS Server Settings.

2. Enter DNS Servers: 10.1.0.1.

3. Leave the Gateway as none.

4. Set DNS Resolution Behavior to Use remote DNS Servers, ignore local DNS.

5. Go to Services → DNS Resolver → DNS Query Forwarding and Enable Forwarding Mode.

6. Scroll up to Outgoing Network Interfaces and select the VPN Interface (in our case, ProtonVPNIS03UDP). Please note that this setting is very important as it prevents DNS leaks).

7. Save and Apply the changes.

Setup is complete

All traffic from your network is now securely routed through the Proton VPN server you chose. You can test this by visiting an IP leak test website from any device on your network.

You should see the IP address and location of the Proton VPN server you specified in the setup process above. The DNS address should match this location. 

Optional tweaks

You can exclude some computers on your network from using the VPN interface. (For example, a PlayStation used for gaming). To do this:

1. Go to Firewall → Rules → LAN → Add.

2. Fill in the fields as follows:

• Action: Pass
• Disabled: Unchecked
• Interface: LAN
• Address Family: IPv4
• Protocol: Any
• Source: Single Host or Alias and add the IP of the device to exclude
• Destination: Any
• Log: Unchanged
• Description: Add a description

3. Click on Display Advanced and change Gateway to WAN.

4. Save and Apply changes.

5. Go to Firewall → NAT → Outbound.

6. Switch Mode to Automatic, then Save and Apply the change.

7. Switch back to Manual, then Save and Apply the change again.

This creates 2 additional rules that allow the selected device to access the local WAN network.

The device is now excluded from the VPN interface and will access the internet using the IP address assigned to your network by your ISP. However, it will use Proton VPN’s DNS server.

The post How to set up Proton VPN on pfSense 2.5.x appeared first on Proton VPN Support.

The app allows you to watch content from more than 60 countries if you have a paid plan. Users with free accounts can select from three countries.

To stream content from media platforms including Netflix, Hulu, or Amazon Prime, you need a Proton VPN Plus plan and an account with the service you would like to use. If you are new to using a VPN to access video content, read our guide on streaming.

Android TV is built into some TVs and also comes installed on a selection of streaming sticks and boxes that can plug into any TV with a spare HDMI port.

The Proton VPN app for Android TV works on Chromecast with Google TV stick, and on any TVs that use the (Android-based) Google TV interface. Users of Chromecast-only devices (Chromecast 1st Gen, 2nd Gen, Ultra, and 3rd Gen) will instead need a VPN router to use their device with our VPN service.

Learn how to use our app on Amazon Fire TV / Firestick device

How to set up Proton VPN on Android TV

To install Proton VPN on your Android TV, follow these steps:

1. Download the application from your TV’s app store. Alternatively, you can install the app using your desktop browser from the Google Play Store. Choose your Android TV as the device to install to automatically start the installation on your TV.

Download Proton VPN for Android TV

2. Follow the instructions on your TV screen:

When you open the app for the first time, a code will be displayed.

Go to https://protonvpn.com/tv, enter your Proton VPN username and password at the login screen, then enter the code displayed on your TV when prompted. If you don’t yet have a Proton account, you can sign up for a Free plan for Android.

Once you have verified the code, you can start using Android TV Proton VPN to watch your favorite content.

Use your remote to navigate between countries and connect to a server by selecting Connect. 

To add a country to the Quick connect menu on the main screen, check Favorite.

To select a specific server, click Server list…

… And pick a server from the list.

You can now enjoy watching your favorite content through your Android TV device.

Android TV and Ethernet problems

Some Android TV s and boxes have a bug that causes Ethernet connections to drop when a VPN connection is established. This is a bug known to Google in the Android TV firmware and affects all VPN apps. To resolve the issue, either update your Android TV’s firmware or connect to the internet using WiFi. 

The post How to use Proton VPN on Android TV appeared first on Proton VPN Support.

A step-by-step guide to setup Proton VPN on your Tomato router.

Proton VPN can be set up on your Tomato powered router to automatically connect to a Proton VPN server available to your subscription whenever the internet connection is established. Below is a step-by-step guide to set up your Proton VPN router. These changes are made in the web configuration panel of your router which you can access by visiting the local IP of your router from your web browser. The two most common, the default local IP’s that most routers have are 192.168.1.1 or 192.168.0.1.

Opening the Router configuration panel

Open your browser and enter 192.168.1.1 or 192.168.0.1 in your browser bar. If these don’t work, you can find the default IP, username, and password in your router’s User Manual.

DNS Settings (connecting via OpenVPN protocol)

Start by configuring your DNS server requests to use Proton VPN DNS server to prevent DNS leaks (Note, once this is set, DNS queries will not resolve unless you are successfully connected to Proton VPN in the later stages).

1. In the left menu, under Basic -> Network
2. In the DNS 1 field enter the following: 10.8.8.1
3. In the DNS 2 field enter the following: 1.1.1.1
   
   

Openvpn Basic router settings (connecting via OpenVPN protocol)

On menu located on the left side of the screen click on the VPN Tunnelling tab and then click on OpenVPN Client tab.

As shown in the screenshot, set the following options:

• Start with WAN – Check the box
• Interface Type – TUN
• Protocol – Choose UDP
• Server Address/Port – Enter server address in the first field and port in the second one – 1194 to you set Protocol to UDP
• Use configuration files name as server address field (example in the screenshot)
• Firewall – Automatic
• Authorization Mode – TLS
• Username/Password Authentication – Checked. Enter your OpenVPN username and password in the newly shown fields from your Proton Account page. Note 1: Your OpenVPN username and password are not the same as your regular Proton Account username and password. Note 2: to use our NetShield DNS filtering feature, append the suffix +f1 to your username to block malware, or +f2  to block malware, ads, and trackers (for example 123456789+f2).
• Username Authen. Only – Unchecked (default)
• Extra HMAC authorization (TLS-AUTH) – Choose Outgoing (1) from the drop-down list
• Create NAT on tunnel – Checked

Tomato routers that don’t have any fields for entering OpenVPN credentials:

Some Tomato routers do not have any fields for entering OpenVPN credentials. If this is the case for yo, go to Administration -> Scripts and enter these lines into the Init field where you should change username and password to your Proton VPN credentials:

echo username > /tmp/password.txt
echo password >> /tmp/password.txt
chmod 600 /tmp/password.txt

For additional config, please enter these:

tls-client
remote-cert-tls server
remote-random
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0
auth sha512
comp-lzo no

Keys settings and starting the VPN connection (OpenVPN Client Configuration)

1. Proceed by clicking on Keys tab.
2. Download the Proton VPN configuration files and extract them.
3. Find a configuration file for the server you were setting up and open it (in this case de-03.protonvpn.com.udp1194.ovpn).
   • Static key – in this field copy and paste text from <tls-auth> to </tls-auth> block.
   • Certificate Authority – in this field copy and paste text from <ca> to </ca> block.
     It should look like this: 
4. Confirm and save all changes by clicking on Save button at the bottom of the settings page.
5. To establish a connection, click on Start Now button. In order to check if you have connected successfully please visit the Status page.

Setting up KillSwitch on Tomato router

• Navigate to Administration -> Scripts and under Firewall please type in:
  WAN_IF=`nvram get wan_iface`
iptables -I FORWARD -i br0 -o $WAN_IF -j REJECT --reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -p tcp -o $WAN_IF -j REJECT --reject-with tcp-reset
iptables -I FORWARD -i br0 -p udp -o $WAN_IF -j REJECT --reject-with udp-reset

• (Every client in LAN will loose internet connection in case of VPN drop.)
  WAN_IF=`nvram get wan_iface`
iptables -I FORWARD -i br0 -s `ip address` -o $WAN_IF -j REJECT --reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -s `ip address` -p tcp -o $WAN_IF -j REJECT --reject-with tcp-reset
iptables -I FORWARD -i br0 -s `ip address` -p udp -o $WAN_IF -j REJECT --reject-with udp-reset

• (Only specified IP address will loose internet access in case of VPN drop.)

Related Articles: 

How to setup Proton VPN on DD-WRT Routers

How to setup Proton VPN on Windows

How to setup Proton VPN on Mac

How to setup Proton VPN on Linux

The post How to setup Proton VPN on a Tomato router appeared first on Proton VPN Support.