Skip to content
SPECIFICTION
Get listed

ocserv

infradead.org

LinuxSelf-hosted
Visit infradead.org
Spec score 7.1 #81 of 94 in Business VPN Software

Spec sheet

Purpose
ocserv is a GNU/Linux server that implements the AnyConnect SSL VPN protocol and is compatible with the OpenConnect VPN client.Read 12 Oct 2026 · infradead.org
Support
Users can ask for help on the project mailing list without subscribing, and posts must be plain text.Read 12 Oct 2026 · infradead.org
License
The manual states that the program is released under the GNU General Public License, version 2.Read 11 Oct 2026 · infradead.org
Access model
vpnRead 22 Sep 2026 · infradead.org
Accounting and management
Connected users can be managed with occtl, and the manual describes RADIUS accounting support.Read 11 Oct 2026 · infradead.org
Admin control level
standardRead 22 Sep 2026 · infradead.org
Authentication
It supports password authentication through PAM or a password file, as well as certificate authentication.Read 12 Oct 2026 · infradead.org
Client isolation
Each client is isolated in a separate process with its own networking device and IP address.Read 12 Oct 2026 · infradead.org
Compatibility
The manual says the server has been tested with the OpenConnect client and is also compatible with certain Cisco AnyConnect clients when compatibility options are configured.Read 11 Oct 2026 · infradead.org
Compression
The feature list states that ocserv does not support compression.Read 12 Oct 2026 · infradead.org
Distribution
Released versions are available as source tarballs, and the latest source code is available from the Git repository.Read 11 Oct 2026 · infradead.org
Downloads
Released versions are available as FTP downloads, release tarballs are PGP-signed, and the server depends on GnuTLS.Read 12 Oct 2026 · infradead.org
Installation dependency
The server depends on GnuTLS.Read 11 Oct 2026 · infradead.org
Integration options
The project documents authentication setups for RADIUS, PAM, Kerberos, and FreeIPA.Read 12 Oct 2026 · infradead.org
IP support
It supports both IPv4 and IPv6.Read 12 Oct 2026 · infradead.org
Key storage
The server key can be stored in a TPM, hardware security module, or smart card.Read 12 Oct 2026 · infradead.org
Network support
The server supports both IPv4 and IPv6.Read 11 Oct 2026 · infradead.org
Networking limit
ocserv does not perform packet forwarding or filtering between networks; the server needs the required routes or firewall rules configured.Read 12 Oct 2026 · infradead.org
Notable limit
The features page lists no support for compression as a feature.Read 11 Oct 2026 · infradead.org
Privilege separation
The authentication process is separated from worker processes, which run unprivileged.Read 12 Oct 2026 · infradead.org
Restart behavior
Persistent cookie storage allows a seamless server restart.Read 12 Oct 2026 · infradead.org
Site-to-site networking
YesRead 22 Sep 2026 · infradead.org
Supported platforms
LinuxRead 22 Sep 2026 · infradead.org
Tunneling
It supports TCP and UDP VPN tunnels using TLS 1.2 and Datagram TLS, with TCP/TLS available as a backup if UDP is unavailable.Read 11 Oct 2026 · infradead.org
VPN transport
It supports TCP and UDP VPN tunnels using TLS 1.2 and Datagram TLS.Read 12 Oct 2026 · infradead.org

Where Specifiction places it

Alternatives to ocservAll alternatives →