Free · No ads · No server needed

Browse freely.
Right on your device.

Green Tunnel Local is a local VPN that runs entirely on your device. It helps you get past DPI filters, use secure DNS and block scam sites — with no server in between, no account and no ads.

How it works
  • Coming soonApp Store
  • Coming soonGoogle Play
  • Coming soonmacOS
  • Coming soonWindows

Coming soon to Android, iOS, macOS and Windows.

Demo — give it a tap

Off

Tap to turn on

  • DPI bypass—
  • DNSISP default
  • Plugin—

Just an illustration — it does not change your connection.

How it works

No middleman server. Everything happens on your device.

Many networks use DPI filters that read the domain name in the first packet of a connection to block access. Green Tunnel reshapes that packet on your device so the filter can’t read it, while the website still understands it normally.

Your device
Apps Browsers, social apps… send requests as usual
Green Tunnel Splits and reorders the first packet
ISP filter Can’t read the domain, lets it through
Website Reassembles it and responds normally
Diagram: an app sends a request, Green Tunnel on your device reshapes the first packet, the ISP filter cannot read the domain name, and the website receives it and responds normally.

  1. Capture on-device

    Green Tunnel uses the operating system’s VPN permission to receive traffic locally — it isn’t sent anywhere else.

  2. Reshape the first packet

    The first TLS/HTTP packet is split or reordered so filters can’t read the domain name (SNI). Your traffic stays encrypted exactly as before.

  3. Go straight to the site

    Your connection goes directly from your device to the website over your normal network. No middleman server, so speed stays practically the same.

To be clear: Green Tunnel does not hide your IP address and is not an anonymity VPN. Websites and your ISP can still see where you connect from. If you need anonymity, use a tool designed for that.

Features

Lightweight, transparent, always at hand.

What you need for a safer connection every day — nothing more.

  • DPI bypass

    Reshapes the first TLS/HTTP packet so filters can’t read the domain. Several strategies built in — pick the one that works on your network.

  • Secure DNS

    DNS lookups are encrypted over DoH, DoT or DoQ, protecting against spoofed and hijacked DNS. Use Cloudflare, Google, Quad9 or your own resolver.

    • DoH
    • DoT
    • DoQ

  • Requester

    See which app connects to which domain, in real time. Hostnames only — HTTPS content is never decrypted.

  • Community plugins

    Ad blocking, scam blocking, DNS profiles, ISP presets. You choose which plugins to turn on.

  • Toggle from anywhere

    One tap from a widget, Quick Settings tile, Control Center, Lock Screen, menu bar or system tray.

  • Privacy first

    No ads, no account, no data collection. Logs stay on your device and you can clear them any time.

Plugins

Built by the community. You choose what to turn on.

Plugins are simple lists and configs, reviewed before release. A few examples:

  • Ad blocking

    Blocks common ad and tracking domains at the DNS level, across all apps.

    BlocklistCommunity

  • Anti-scam

    Warns about and blocks scam and phishing sites using public lists, such as Chống Lừa Đảo (Vietnam).

    BlocklistRegular updates

  • ISP presets

    Suggested strategies for Viettel, VNPT and FPT — tested and shared by users.

    • Viettel
    • VNPT
    • FPT

  • DNS profiles

    Ready-made configs for trusted encrypted DNS resolvers — switch with one tap.

    • Cloudflare
    • Google
    • Quad9

ISP and organization names are used only to describe plugin contents; Green Tunnel is not affiliated with them.

Platforms

One experience, four platforms.

Toggle it the way that feels native on each device.

  • Android

    • Quick Settings tile
    • Home screen widget
    • App shortcut
    • Toggle from the notification
    Coming soon

  • iOS

    • Control Center
    • Lock Screen control
    • Widget
    Coming soon

  • macOS

    • Menu bar icon
    • Control Center
    Coming soon

  • Windows

    • System tray icon
    • One-click toggle
    Coming soon

FAQ

Frequently asked questions

Straight answers — including what Green Tunnel doesn’t do.

Does Green Tunnel hide my IP address?

No. Green Tunnel doesn’t route your traffic through any server, so websites and your ISP still see your real IP. It is not an anonymity VPN.

Does it decrypt HTTPS?

No. Green Tunnel only changes how the first packet is split and sent. The encrypted content between you and the website is untouched. Requester reads hostnames only, never content.

Does it drain the battery?

Very little. Green Tunnel only touches the start of each connection and doesn’t re-encrypt all your traffic like a traditional VPN. Actual usage depends on your device and how you use the network.

Is it legal to use?

Green Tunnel is a tool for privacy, secure DNS and scam protection. Rules about network use differ from place to place; you are responsible for complying with the laws where you live.

Why does it need VPN permission?

Operating systems only let apps handle network traffic through the VPN permission. Green Tunnel uses it to run a “local VPN” on your device — your data never passes through our servers, because we don’t have any.

Is it free?

Yes. It is currently completely free, with no ads.