Linux VPN

OrbVPN for
Linux

A native GTK desktop app paired with a privileged systemd helper. WireGuard, VLESS, OrbConnect and SSH with the same anti-censorship transports as our mobile apps, shipped as a .deb and a portable tar.gz.

Download for Linux

Version 22.1.3 • Ubuntu 22.04+ / Debian 12+ (.deb) • other systemd distributions (tar.gz) • 64-bit

Quick Install

Ubuntu / Debian (.deb)

Downloads the newest package and lets apt install it with its dependencies
wget https://orb.blob.core.windows.net/orbvpn/OrbVPN-latest_amd64.deb && sudo apt install ./OrbVPN-latest_amd64.deb

Any systemd distribution (tar.gz)

Unpacks to /opt/orbx and installs the orbvpn-service systemd unit
wget https://orb.blob.core.windows.net/orbvpn/OrbVPN-latest-linux-x64.tar.gz && tar -xzf OrbVPN-latest-linux-x64.tar.gz && cd OrbVPN-*-linux-x64 && sudo ./install.sh

Helper service by hand

Register, inspect or remove the privileged helper yourself
sudo orbvpn-service -install

Built for Linux

Privileged systemd helper

A small root service, orbvpn-service, owns the tunnel, routes, DNS and firewall. The desktop app itself runs unprivileged.

Kill switch & DNS leak protection

Firewall rules block every packet outside the tunnel the moment the VPN drops, and DNS never leaves the tunnel.

Smart Connect

Races WireGuard, VLESS, OrbConnect and SSH with the right mimicry and only reports Connected once real traffic flows.

Every protocol, every transport

WireGuard, VLESS (Reality, WebSocket, gRPC, CDN), OrbConnect and SSH/OSSH, the same stack as the mobile apps.

Native GTK desktop app

A GTK application with a system-tray icon on KDE Plasma, XFCE, Cinnamon and MATE, and on GNOME with the AppIndicator extension.

Network device scanner

Map every device on your local network and get a security score, from the same app.

Helper Service Commands

Terminal
$orbx# Launch the desktop app
$sudo orbvpn-service -install# Register and start the systemd helper
$systemctl status orbvpn-service# Check that the helper is running
$sudo orbvpn-service -debug# Run the helper in the foreground with verbose logs
$journalctl -u orbvpn-service -f# Follow the helper's logs
$orbvpn-service -version# Print the installed version
$sudo orbvpn-service -uninstall# Remove the helper

Supported Distributions

Ubuntu

22.04, 24.04

DEB package

Debian

12

DEB package

Linux Mint

21, 22

DEB package

Pop!_OS

22.04

DEB package

Other systemd distributions

x86_64 only

Portable tar.gz · not in our test matrix

Linux FAQ

Which distributions does OrbVPN support?+
The .deb is built and tested on Ubuntu 22.04 and later and works on Debian 12 and Ubuntu-based distributions such as Linux Mint and Pop!_OS. Other systemd-based distributions can use the portable tar.gz, but they are not part of our test matrix.
Is there a command-line client?+
Not yet. The desktop app is graphical. The privileged helper, orbvpn-service, is managed from the terminal with -install, -debug, -version and -uninstall, and runs as a systemd service that starts at boot.
Does OrbVPN support WireGuard on Linux?+
Yes. The helper runs WireGuard in user space and carries it directly over UDP, through an HTTPS tunnel, or over a CDN-fronted WebSocket on restricted networks.
Does it work in Iran, Russia and China?+
That is what it is built for. Smart Connect races VLESS Reality, CDN-fronted WebSocket, gRPC, OrbConnect and obfuscated SSH with mimicry profiles, verifies that traffic really flows and that your public IP changed, and remembers what worked on your network.

Linux Privacy Done Right

A native GTK app and a systemd helper, built for the Linux desktop.

Download for Linux