TUN Mode takes all system traffic and is the usual choice. The first time, you approve the VPN or virtual network adapter. Proxy Mode sends through the VPN only the apps that read the system proxy, such as a browser; other apps connect directly. Use it when you want only some apps on the VPN, or when one app conflicts with TUN, such as some input methods or LAN streaming tools.
Windows, macOS, and Linux have this switch. Android uses TUN and has no Proxy Mode. To exclude one Android app, read How do I keep one app off the VPN?.
| Platform | What it carries |
|---|---|
| Windows | TUN: the whole system. Proxy: apps that use the system proxy. TUN needs an administrator |
| Mac App Store | Use TUN. This build cannot set the system proxy |
| Mac DMG | Starts in Proxy Mode. TUN is the whole system, and only then asks for a VPN configuration |
| Linux AppImage | Proxy Mode until you run Install for TUN Mode once |
| Linux tar.gz | Both modes, with no one-time TUN install |
Windows
- Open Settings > Connection and use the Windows section.
- Choose TUN Mode or Proxy Mode. There is no Save button. If you are connected, select Reconnect now when VilaNet shows Changes apply on the next connection.
- If TUN mode requires administrator privileges, select Elevate. If User Account Control appears, confirm it names VilaNet, then select Yes. Connect again if the app restarts and stays disconnected.
- For TUN after you sign in to Windows, set VilaNet to start at login with administrator rights. Starting at login without administrator rights opens the app without them.
- In Proxy Mode only, turn on Auto-Configure System Proxy if the browser still ignores the VPN.
If diagnostics show Preferred: TUN and Effective: Proxy, select Elevate. Open Diagnostics from the bug icon, or from Settings > Connection > Advanced.
macOS
- Under Settings > Connection, in the macOS section, choose TUN Mode (whole system) or Proxy Mode (apps and browser). The change is saved immediately and applies on the next connection.
- The App Store build uses TUN Mode and asks macOS to approve the VPN. Its sandbox cannot set the system proxy, so Proxy Mode can show Connected while pages fail, and no system-proxy confirmation appears. Use TUN Mode. Current store builds switch to TUN and mark Proxy Mode as direct-download only.
- For Proxy Mode, use the official DMG. It starts in Proxy Mode and does not ask to add a VPN configuration until you switch to TUN Mode.
- DMG TUN Mode needs a one-time system-extension approval. macOS 13 through 15: System Settings > Privacy & Security. Later versions: System Settings > General > Login Items & Extensions. macOS 12: System Preferences > Security & Privacy > General. Approve only VilaNet. The App Store build uses a network extension and skips this step.
- Do not keep the DMG and the App Store build installed together. Remove one if they conflict.
Linux
- An AppImage can use Proxy Mode immediately. For a system-wide VPN, open Settings > Connection, read Running from AppImage in the Linux section, and select Install for TUN Mode. If the runtime is not ready, selecting TUN Mode starts that same install.
- Enter the Linux account password, not the VilaVPN password, and only if the prompt names VilaNet. After restart, confirm TUN Mode.
- If you cancel elevation, TUN is not installed. Stay on Proxy Mode.
- A tar.gz package supports both modes without that install. TUN Mode needs root or the network capability; use the in-app permission request.
How to tell it worked
The home screen stays Connected, and two familiar HTTPS websites load. In Proxy Mode, a browser that follows the system proxy should load. An app that ignores the system proxy staying off the VPN is expected.
Still not working?
- Switch modes once, select Reconnect now if it appears, and retest the same two sites.
- App Store Proxy Mode shows Connected and pages fail: use TUN Mode, or the DMG. See the Mac DMG and App Store builds.
- You want one site or app to skip the VPN: Proxy Mode already leaves non-proxy apps direct; in TUN Mode, add a direct domain rule. See website rules.
- Both modes stay Connected and ordinary pages still fail: read Connected but no internet or the same guide.
Install steps: Windows, macOS, Linux. V2Ray is closed to new subscribers; an existing subscription does not use this switch. OpenConnect (AnyConnect) is also closed to new subscribers, and VilaNet does not support it.