Pritunl — Pritunl — an open-source VPN server with unusual range: one self-hosted box speaks OpenVPN, WireGuard, and IPsec, hands
What it is
Pritunl is an open-source VPN server with unusual range: one self-hosted box speaks OpenVPN, WireGuard, and IPsec, hands out profiles through a clean web console, and clusters across datacenters when a single machine is not enough.
Editor's review
Long-form introduction by the BetterPicker editors · checked against the official site · Nov 4, 2026
Pritunl is an open-source VPN server with unusual range: one self-hosted box speaks OpenVPN, WireGuard, and IPsec, hands out profiles through a clean web console, and clusters across datacenters when a single machine is not enough. It has been developed in the open for over a decade, names Aviatrix, Ivanti Secure Access, and OpenVPN Access Server as the commercial products it replaces, and prices by host rather than by user -- the free Community edition already allows unlimited servers, users, and devices on one machine. A REST API and a Python plugin system round it out, so provisioning and custom authentication can live in your own pipelines.
What it does well
Protocol coverage is the headline: legacy OpenVPN clients, modern WireGuard peers, and IPsec site-to-site links all terminate on the same server, so mixed device fleets and datacenter links coexist without extra licensing.
Management is administrative-grade: organizations, users, routes, and multi-server clusters run from the web interface; servers coordinate through MongoDB, run as equal peers, and fail over automatically with no single point of failure.
Security goes past the usual: TOTP and push two-factor authentication, plus Enterprise device authentication anchored in TPM and Apple Secure Enclave, a dynamic firewall, and SELinux policies.
The client side is covered too: the free Pritunl Client for macOS, Windows, and Linux -- with a terminal interface for headless boxes -- connects to any OpenVPN server, not just its own.
Automation is first-class: a REST API with multiple keys drives CI pipelines, and the Python plugin system extends authentication and access control without forking the codebase.
Who it's for
Homelab builders and small teams get real value from the free Community host. Growing companies land on Premium at $10 per host per month for port forwarding, gateway links, and Chromebook support. Enterprises needing single sign-on with SAML or Duo, automatic failover, and multi-cloud VPC peering across AWS, Google Cloud, Azure, Oracle, and Hetzner pay $70 per host -- still flat regardless of headcount. The official install page lists per-distribution commands, and walkthrough videos cover server setup and first connections from scratch.
Where it falls short
Installation assumes a Linux administrator: packages come from a dedicated repository and the server depends on MongoDB, which is more moving parts than consumer VPN apps.
The best features sit high on the ladder: single sign-on, TPM device authentication, failover, and site-to-site links require the $70 Enterprise plan -- a steep jump from $10 for small deployments.
Documentation is thorough but utilitarian, spread across a docs site and community forums; expect to read before you click.
Advanced links add components: IPsec site-to-site on Enterprise runs through the separate pritunl-link client, which skips the database but is one more thing to learn and monitor.
Specs at a glance
Facts from the official site · not editorial opinion
| Type | Self-hosted OpenVPN, WireGuard, and IPsec server |
|---|---|
| Price | Community free; Premium $10/host/mo; Enterprise $70/host/mo |
| Management | Web console, MongoDB-backed clusters, REST API |
| Security | TOTP and push 2FA; TPM and Secure Enclave on Enterprise |
| Clients | Pritunl Client for macOS, Windows, Linux; Chrome OS profiles |
| Scale | Multi-datacenter clusters with automatic failover |
| Best for | Teams wanting flat per-host pricing with no per-user fees |
Frequently asked questions
▸Is Pritunl free?
Yes -- the Community edition runs one host with unlimited VPN servers, users, and devices at no cost, source code included.
▸Does it support WireGuard?
Yes -- client connections work over OpenVPN and WireGuard, and WireGuard or IPsec carries high-performance site-to-site links.
▸How is it priced?
Per host, not per user: Premium is $10 per host per month and Enterprise is $70, each allowing unlimited users and connections.
▸What do client devices need?
Any OpenVPN client can connect; the free Pritunl Client for macOS, Windows, and Linux adds WireGuard support and a terminal interface.
Video reviews
2 review videos aggregated · praise and criticism included alike · click through to the original video
Channels that covered it
Channels are aggregated as sources only — we don’t rate creators
Related tools
Where to go next
External links open in a new tab; external content is independent of this site.
Link down? Every object page is re-checked monthly.