OpenConnect / ocserv

An open SSL VPN that speaks the AnyConnect protocol.

Niche · 44 EncryptedProtocols

How widely is it used?

Used for specific scenarios

The go-to open replacement for AnyConnect gateways.

Generate a OpenConnect / ocserv config

Built in your browser from your own server details. Nothing is uploaded or stored.

Generate an ocserv config

How it works

ocserv serves the Cisco AnyConnect-compatible protocol over TLS with a DTLS data channel, so standard enterprise clients connect to a fully open-source server.

Connects

Client → ocserv gateway

Protocols

TLS, DTLS, AnyConnect-compatible

Typical users

Enterprises avoiding vendor lock-in, Self-hosters

Main use case

Enterprise-style SSL VPN without proprietary licensing.

Advantages

DTLS keeps UDP performance
Works with existing AnyConnect clients
Good MFA support

Limitations

Server setup is more involved than WireGuard
Certificate lifecycle to manage

Related VPN types

SSL/TLS VPN

Widely used

Tunnels that ride the same TLS everyone already allows.

Generate config

Clientless SSL VPN

Declining

Browser-only access to selected internal applications.

Generate config

Corporate VPN

Widely used

Company-operated infrastructure with central identity and policy.

Generate config

All 34 VPN types Compare side by side