Repository navigation
MugVPN 0.2.0
The first release: a free menu-bar client that keeps several OpenVPN connections up at the same time — the office VPN, a client's VPN and your home lab, each with its own tunnel, routes and DNS.
Several connections at once
- Every connection runs its own bundled
openvpn2.7 — without root: a small helper does what needs root, after checking every profile and every route and DNS change it asks for. - Split DNS per connection: names in the domains a server pushes go to that tunnel's DNS, everything else as before — two VPNs can each answer for their own domains. Or set your own DNS per connection.
- Warnings when connections collide: two that both take all traffic, overlapping routes, DNS already taken.
Protection
- Kill switch per connection: if a connection that carries all traffic drops unexpectedly, traffic outside the VPN stays blocked until you reconnect or unblock it — even across a restart of the helper.
- Leak protection while a connection carries all traffic: no IPv6 and no DNS outside the VPN.
- Leak check after connecting and on every network change: warns if the default route, a public network (TunnelVision) or the DNS goes around the tunnel.
Connections window
- Create a connection from scratch or edit any profile in a form or as text — only the lines you change are rewritten.
- Import
.ovpnfiles, Tunnelblick.tblkfolders, profiles from a URL or an OpenVPN Access Server. - Username and password, private-key passwords, OTP challenges, web/SSO sign-in, PKCS#12, HTTP proxies; passwords stay in your login Keychain.
Everyday
- Coloured live log, notifications, reconnect after sleep and on network changes, captive-portal sign-in for hotel Wi-Fi.
MugVPN --command connect|disconnect|reconnect|status|listfor scripts; your own pre/up/down scripts beside a profile — run as you, never as root.- Export Diagnostics… for bug reports, with the profiles reduced to settings known to hold no secrets.
- 22 languages, VoiceOver labels, light and dark appearance, an uninstaller.
Universal binary (Apple silicon + Intel), macOS 13+, signed and notarized; the SHA-256 is beside the image. Install: brew install --cask tanderbold/tap/mugvpn or the dmg below.