SoftEther VPN: What Is It and How Does It Work?

SoftEther is a newer VPN technology that’s been getting a lot of attention for being fast and reliable under any network condition. In this guide, we’ll break down what makes SoftEther special and how it stacks up against the classic VPN protocols you already know.

What Is SoftEther VPN?

SoftEther (Software Ethernet) VPN is a free, open-source VPN platform created to establish secure client-to-server and site-to-site connections over the internet. 

It was started as a master’s thesis project by Daiyuu Nobori at the University of Tsukuba in Japan, whose goal was to create a VPN solution that works in restrictive network environments. After realizing that VPN protocols like IPsec, PPTP, and L2TP can’t connect through firewalls, proxy servers, and NATs without the use of additional software, he developed the SoftEther VPN protocol. 

Now, the SoftEther VPN project is further developed and consists of several important components: the SoftEther server, protocol, client, and bridge.

SoftEther VPN Server

This is the first major component of the SoftEther ecosystem. It turns your device into a VPN host, so you can connect to it from a remote location. After setting it up, you can connect to this server using various protocols, including SoftEther (more on that below), OpenVPN, or L2TP/IPsec. You don’t need to install additional software on the remote device – as long as you configure it properly, you can access your SoftEther server using your device’s built-in VPN settings. 

Unlike commercial VPNs, SoftEther doesn’t offer its own server network. However, volunteers from the University of Tsukuba host a network of free public servers that run on SoftEther. These servers can be found at VPN Gate, and most of them are located in Japan.

SoftEther VPN Protocol

The SoftEther VPN protocol uses SSL/TLS encryption over TCP port 443, which is the same port used by HTTPS. Since the majority of internet traffic runs on HTTPS, SoftEther can easily blend into a normal internet connection and avoid detection and blocks. 

However, although the protocol is secure and fast, it’s not widely adopted by major commercial VPNs because it’s quite complex to set up across many servers.

SoftEther VPN Client

This is the official VPN software you use to connect to a SoftEther Server. It’s only available for Windows devices, but you can also set it up on Mac and Linux using terminal-based tools. The SoftEther VPN Client enables you to manage virtual adapters that SoftEther uses, create a new connection profile, select the connection method, and connect or disconnect from the server. 

SoftEther VPN Bridge

The SoftEther VPN Bridge connects two separate networks as if they were physically connected to each other. This is like a site-to-site VPN connection – devices in both networks can see each other as if they were all connected to the same router. 

How Does SoftEther VPN Work?

SoftEther creates a virtual network adapter that behaves like an extra network card inside your computer. That gives it more control and allows it to do things that some VPNs sometimes struggle with, like avoiding detection and keeping connection speeds high despite using encryption.

To connect, you need to add a server first. This can be a device you set up as a SoftEther server, a free server from VPN Gate, or a rented server. Once you enter your server’s address and your login details, simply click Connect, and your traffic will be routed using the SoftEther protocol.

Is SoftEther VPN Safe?

Yes, the SoftEther VPN framework supports strong protocols and encryption methods, including the top-grade AES 256-bit encryption. It’s fully open-source, so anyone can inspect the code for vulnerabilities. 

However, SoftEther has only gone through one independent security audit, which was back in 2017. This audit discovered several security vulnerabilities that were later patched, but there has been no follow-up to verify that SoftEther is 100% safe now.

SoftEther VPN Benefits and Drawbacks

Pros	Cons
✅ Multi-protocol support	❌ More complex to set up than regular VPNs
✅ Fast performance	❌ Client app available only for Windows
✅ Works well behind firewalls
✅ Free and open-source

SoftEther vs. Other Protocols

SoftEther vs. OpenVPN

Both SoftEther and OpenVPN are open-source and use AES 256-bit encryption. They’re similar security-wise, but OpenVPN has a long-standing reputation as one of the safest VPN protocols. 

OpenVPN also has a larger user base, so it’s continuously tested and improved. While the researchers at the University of Tsukuba are also reviewing and working on SoftEther, it’s not as widely adopted or tested in real-world environments as OpenVPN.

Both options can use TCP over the 443 port for reliability under restrictive network conditions, but with OpenVPN, you also have the option to switch to the UDP port for better speeds. Still, SoftEther is much faster. 

Another advantage of SoftEther is that the servers can use any protocol, while OpenVPN servers can only use OpenVPN.

SoftEther vs. WireGuard

WireGuard is another open-source VPN protocol, but it has a much smaller codebase than SoftEther, making it much easier to audit. It’s also less prone to vulnerabilities and easier to set up and maintain. 

The lightweight design also allows WireGuard to achieve fast speeds, similar to or faster than SoftEther.

However, WireGuard can’t go around network admin blocks because its packets and handshake are easily recognized by network filters and DPI. It’s fast, easy to use, and secure for regular use, but if you need a VPN that works behind firewalls, SoftEther is a much better option.

SoftEther vs. IKEv2/IPsec

The IKEv2/IPsec protocol is great if you need a stable connection when switching networks, like from mobile to Wi-Fi. Both options are similar in terms of speed, with SoftEther being slightly faster. Security strength is roughly equal, but IKEv2/IPsec is much more likely to be blocked because it relies on well-known VPN ports, like 500, 4000, and ESP.

SoftEther vs. L2TP/IPsec

L2TP/IPsec has weaker security compared to SoftEther. It can be safe, but only with careful configuration. However, even then, SoftEther takes the lead. For example, unlike L2TP/IPsec, SoftEther uses perfect forward secrecy by default – it frequently changes encryption keys, so future and past sessions can’t be decrypted if the current key gets compromised. 

SoftEther is also faster and less likely to be blocked. The only advantage of L2TP/IPsec is that it’s natively supported in every major OS. However, most VPNs stopped using it due to its weak performance and security risks.

SoftEther vs. SSTP

SoftEther and SSTP are both secure options that use the 443 port to appear like a standard HTTPS connection. However, SSTP’s signature is easily recognized by DPI, while SoftEther can mimic HTTPS traffic at the packet level and go undetected. 

Another flaw of SSTP is its high CPU usage. It’s also only available on Windows.

Since it’s closed-source and owned by Microsoft, which has some questionable security practices, it can’t be trusted to keep your data private. Plus, it doesn’t support authenticated proxies, so it won’t work with servers that require a username and a password. 

SoftEther vs. PPTP

PPTP is considered obsolete and unsafe – its MS-CHAPv2 authentication protocol is weak and can be broken in minutes. It’s known for its fast speeds, but SoftEther is a safer recommendation in any scenario. 

FAQ