OpenConnect VPN Server (ocserv)

Spec sheet

Purpose

ocserv is an open-source Linux SSL VPN server designed for organizations needing remote access VPN with enterprise user management and control.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Security

The server uses TLS and Datagram TLS and supports protecting its server key with a TPM or hardware security module.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Support

The project directs users to its plain-text mailing list for help and accepts bug reports through the mailing list or issue tracker.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Access model

vpnRead 22 Sep 2026 · ocserv.openconnect-vpn.net

Accounting

Client usage statistics are available through an API or the RADIUS accounting protocol.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Admin control level

advancedRead 22 Sep 2026 · ocserv.openconnect-vpn.net

Authentication

Authentication options include PAM, RADIUS, password files, HOTP/TOTP, OpenID Connect, smart cards, certificates, and Kerberos with GSSAPI/SPNEGO.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Client compatibility

The ecosystem page lists OpenConnect clients, a Windows graphical client, AnyLink Secure Client, Cisco AnyConnect, and Clavister OneConnect as compatible clients.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Client isolation

Each client runs in an isolated seccomp process with a separate network device and IP, while privilege separation divides the main process from client workers.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Networking

ocserv supports IPv4 and IPv6, HTTPS port sharing, the Proxy Protocol, and routes pushed between server and client.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Operations

Administrators can query statistics and issue commands interactively or through the JSON API in occtl.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Packages

The maker lists packages for Ubuntu, RHEL/CentOS, Fedora, Debian, FreeBSD, OpenBSD, OpenWRT, and VyOS.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Release signing

The download page says all releases are signed with the project's PGP key.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Resilience

It uses a primary UDP/DTLS VPN channel and a TCP/TLS control and backup channel.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Resource controls

Administrators can set per-client or per-group bandwidth and network-priority limits and confine clients to specific cgroups.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Scale

The project says connected-client capacity and processing scale with CPU count, and its compact memory footprint lets less costly hosts handle thousands of clients.Read 11 Oct 2026 · ocserv.openconnect-vpn.net

Site-to-site networking

YesRead 22 Sep 2026 · ocserv.openconnect-vpn.net

SSO / SCIM

YesRead 22 Sep 2026 · ocserv.openconnect-vpn.net

Supported platforms

Linux; FreeBSD; OpenBSD; other BSD-derived systemsRead 22 Sep 2026 · ocserv.openconnect-vpn.net

Plans and prices

Every OpenConnect VPN Server (ocserv) plan and price →

Where Specifiction places it

• Virtual Private Network Software#28 of 547.9
• Business VPN Software#60 of 947.8