VPN Toolkit
Validate WireGuard and OpenVPN configs, compute split-tunnel routes, check IPsec/IKEv2 cipher proposals, and work out the right MTU — five tools covering setup, hardening, and the fragmentation problems that show up after. All run entirely in your browser.
How these fit together
WireGuard Config Validator checks a .conf file's [Interface] and [Peer] sections for malformed keys, missing AllowedIPs, duplicate peers, and invalid endpoints before you deploy it. Setting up OpenVPN instead? OpenVPN Config Auditor audits an .ovpn file for deprecated ciphers, weak digests, missing tls-crypt, and VORACLE-vulnerable compression. Want to route everything through the tunnel except a few subnets? VPN Split-Tunnel CIDR Calculator computes the exact AllowedIPs/route list for that. Running IPsec/IKEv2 instead of WireGuard or OpenVPN? IPsec/IKEv2 Proposal Strength Checker breaks down an ike=/esp= cipher proposal string and flags weak ciphers, digests, and DH groups. And once the tunnel is up, VPN MTU / TCP MSS Calculator works out the interface MTU and MSS clamp that keep large transfers from silently hanging.
WireGuard Config Validator
Validate a WireGuard .conf file — malformed keys, missing AllowedIPs, duplicate peers, and bad endpoints.
OpenVPN Config Auditor
Audit an .ovpn client config — deprecated ciphers, weak digests, missing tls-crypt, and VORACLE-vulnerable compression.
VPN Split-Tunnel CIDR Calculator
Compute the AllowedIPs/route list to send everything through a VPN except specific subnets.
IPsec/IKEv2 Proposal Strength Checker
Break down an ike=/esp= cipher proposal string and flag weak ciphers, digests, and DH groups.
VPN MTU / TCP MSS Calculator
Compute a recommended VPN interface MTU and TCP MSS clamp for WireGuard, OpenVPN, or IPsec.