UTunnel VPN

UTunnel Access Gateway allows you to run your own ZTNA-based VPN gateway on your DigitalOcean droplet. The Droplet can be of any size based on your requirements. With UTunnel, you can easily set up a DigitalOcean VPN server that supports roaming VPN users, site-to-site tunnelling, client device access control, external DNS integration, split tunnelling, and manual VPN connections, all while enforcing zero-trust security principles.

UTunnel also includes context-aware access policies, identity-based authentication, SSO integration, and multi-factor authentication (MFA), ensuring least-privilege access and secure resource segmentation. For more details, you can check out the UTunnel Features page.

UTunnel provides client apps for Windows, macOS, Linux, Android, and iOS, so that you can connect seamlessly to your VPN gateway from all the devices you own. It’s well suited for small-medium businesses and offers monthly billing, no long-term commitments. It also offers a 14-day risk-free trial so that you can test the VPN service before moving on to a paid plan. Your UTunnel access gateway subscription cost is based on the number of users and the chosen plan. You can check UTunnel Access Gateway Pricing page for more details on the plans offered.

Software Included

Creating an App using the Control Panel

Click the Deploy to DigitalOcean button to create a Droplet based on this 1-Click App. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

Creating an App using the API

In addition to creating a Droplet from the UTunnel VPN 1-Click App using the control panel, you can also use the DigitalOcean API. As an example, to create a 4GB UTunnel VPN Droplet in the SFO2 region, you can use the following curl command. You need to either save your API access token) to an environment variable or substitute it in the command below.

curl -X POST -H 'Content-Type: application/json' \
         -H 'Authorization: Bearer '$TOKEN'' -d \
        '{"name":"choose_a_name","region":"sfo2","size":"s-2vcpu-4gb","image": "utnadmins-utunnelvpn"}' \
        "https://api.digitalocean.com/v2/droplets"

Getting Started After Deploying UTunnel VPN

• Once the deployment of your UTunnel VPN droplet is complete, note down its IP address.
• Signup with UTunnel and create a server with your newly created droplet’s public IP address. Select the On-Premise option when you create the server and it comes with a 14-day free trial period. You will be provided with a server registration token.
• Connect to your UTunnel VPN Droplet via SSH using the following command:

ssh root@your_droplet_public_ipv4

• After successful login, execute the following commands, after replacing the REG_TOKEN with the registration token obtained in step 2:

sudo utnservice update
sudo utnservice register REG_TOKEN
sudo utnservice start

• Make sure that inbound connections to the following ports are allowed to accept VPN connections.

TCP 443, UDP 443, UDP 53 (Ports used for OpenVPN connections)

UDP 4500, UDP 500 (Ports used for IPSEC connections)

• Your UTunnel VPN server would be ready to accept VPN connections now. Invite users into your server and start using the VPN.

There is a detailed tutorial to help you install UTunnel VPN 1-Click App from DigitalOcean Marketplace. If you require any further assistance, you can visit the UTunnel VPN help portal or send an email to [email protected]