Client Quick Start
Connect to your rVPN server in a few minutes.
Prerequisites
Section titled “Prerequisites”- A running rVPN server (see Server Quick Start)
- The
prekey-bundle.jsonfile from your server operator
1. Download and Install
Section titled “1. Download and Install”The easiest way is the universal installer:
curl -fsSL https://assets.rvpn.org/install.sh | sudo bash -s -- --setup --clientIt will auto-detect your platform, download the correct binary, verify the checksum, and walk you through configuration.
Or manually:
| Platform | Binary |
|---|---|
| macOS Universal | rvpn-macos-universal |
| Linux x86_64 | rvpn-x86_64-linux-gnu |
| Linux ARM64 | rvpn-aarch64-linux-gnu |
| Linux ARMv7 | rvpn-armv7-linux |
| FreeBSD x86_64 | rvpn-x86_64-freebsd |
macOS App Store (recommended): Download from the App Store
Or install the command-line tool manually:
curl -LO https://assets.rvpn.org/1.3.1/rvpn-macos-universalchmod +x rvpn-macos-universal && sudo mv rvpn-macos-universal /usr/local/bin/rvpnxattr -d com.apple.quarantine /usr/local/bin/rvpnSecurity note: Official macOS binaries are signed by PDG Global Limited. If you download a binary from another source that is not signed by us, do not use it.
# Linuxcurl -LO https://assets.rvpn.org/1.3.1/rvpn-x86_64-linux-gnuchmod +x rvpn-x86_64-linux-gnu && sudo mv rvpn-x86_64-linux-gnu /usr/local/bin/rvpn
# FreeBSDfetch https://assets.rvpn.org/1.3.1/rvpn-x86_64-freebsdchmod +x rvpn-x86_64-freebsd && sudo mv rvpn-x86_64-freebsd /usr/local/bin/rvpn2. Generate Your Identity Key
Section titled “2. Generate Your Identity Key”Each client has its own identity key:
mkdir -p /etc/rvpnrvpn keygen -o /etc/rvpn/identity.key3. Create a Configuration File
Section titled “3. Create a Configuration File”nano /etc/rvpn/client.tomlserver_address = "wss://your-server.com/api/v1/ws"identity_key_file = "/etc/rvpn/identity.key"prekey_bundle = "/etc/rvpn/prekey-bundle.json"
[socks5]listen_address = "127.0.0.1:1080"Copy prekey-bundle.json from your server operator to /etc/rvpn/prekey-bundle.json.
4. Connect
Section titled “4. Connect”rvpn -c /etc/rvpn/client.tomlYou should see:
INFO Connecting to wss://your-server.com/api/v1/wsINFO SOCKS5 proxy listening on 127.0.0.1:10805. Configure Your Apps
Section titled “5. Configure Your Apps”Set your system or browser proxy to SOCKS5 127.0.0.1:1080.
macOS System Proxy:
System Settings → Network → your connection → Proxies → SOCKS Proxy → 127.0.0.1:1080
Chrome / Brave (via extension):
Install SwitchyOmega and add a SOCKS5 proxy at 127.0.0.1:1080.
Firefox:
Settings → General → Network Settings → Manual proxy configuration → SOCKS Host: 127.0.0.1, Port: 1080, SOCKS v5.
curl:
curl --socks5 127.0.0.1:1080 https://example.com(Optional) Full Tunnel (TUN) Mode
Section titled “(Optional) Full Tunnel (TUN) Mode”Instead of a SOCKS5 proxy, you can enable full tunnel mode to route all IP traffic through the VPN. TUN mode requires root or administrator privileges.
Add [tun] to your client.toml to enable it:
[tun]enabled = trueThe interface name is assigned automatically by the operating system — typically utun0 on macOS and tun0 on Linux/FreeBSD. Pass a custom interface_name in the [tun] section if you want a specific name. Your client IP address and gateway are assigned dynamically by the server.
Connect with the same command:
sudo rvpn -c /etc/rvpn/client.tomlNext Steps
Section titled “Next Steps”- macOS App - Native macOS VPN with Network Extension
- iOS App - Mobile VPN with split tunnel and ad blocking
- Android App - Full-tunnel VPN for Android 14+
- SOCKS5 proxy mode in detail
- Prevent DNS leaks with the built-in DNS proxy
- Full tunnel (TUN) mode
- All client configuration options
- Use case scenarios — practical guides for common use cases
- DNS leak prevention — stop DNS leaks in SOCKS5 mode
- Troubleshooting — solutions for common problems