Share
Share
Share
Share
Very few. SoftEther is one of the most capable VPN protocols ever built, yet almost no commercial SoftEther VPN exists. If you are asking which VPN supports SoftEther in 2026, the honest list comes down to GnuVPN, CactusVPN, VPN Gate network, and hosting it yourself.
That scarcity matters because SoftEther does something rivals cannot. It disguises VPN traffic as ordinary HTTPS, so firewalls built to block VPNs see routine web browsing instead. On a campus, corporate, or national network, that is the difference between a connection and a dead end.
The gap between the four options matters more than the list. Only one builds SoftEther into the app. The rest ask you to do the work.
SoftEther VPN Providers Compared
Here is how the options stack up:
| Option | SoftEther support | Setup |
| GnuVPN | Built into the app | Pick it from the protocol list |
| CactusVPN | Yes, but manual | Separate SoftEther client, Windows only |
| VPN Gate | Yes, free | Volunteer servers, manual setup |
| Self-hosted | Full control | You run the server |
Why So Few VPNs Offer SoftEther
The providers who skip it say so openly. ExpressVPN’s own blog calls SoftEther “not a practical option because few commercial VPN providers support it.”
Private Internet Access notes that it is not widely adopted by major commercial VPNs. Palo Alto Networks makes the same point in its technical documentation.
The reason is operational, not technical. SoftEther is complex to deploy and maintain across hundreds of servers, and the large providers would rather build their own obfuscation tools than run someone else’s protocol at scale.
That leaves a real gap. SoftEther tunnels traffic through HTTPS on port 443, the same port that secures ordinary websites.
A firewall watching for VPN activity sees routine web browsing instead. For anyone on a network that blocks VPNs, that behaviour is the entire point, and the market barely serves it.
VPN Providers That Support SoftEther
Three options exist if you want SoftEther without building it yourself, and they are not equal:
1. GnuVPN: SoftEther Built Into the App
GnuVPN is the one VPN with SoftEther built in as a standard feature instead of an advanced option. You select it from the protocol list in the app, the same way you would pick WireGuard, with no separate client and no manual configuration.
- Protocols: SoftEther, AmneziaWG, WireGuard, OpenVPN, and IKEv2, all in-app
- AmneziaWG: a modified WireGuard that scrambles its traffic signature to avoid detection, at WireGuard speed
- Network: servers in 55+ countries
- Payment: cards, PayPal, and crypto, including USDT on TRON
- Certification: Google MASA Level 2 on the Android app
- Price: from $2.79 per month on the two-year term
2. CactusVPN: SoftEther, But Manual
CactusVPN has supported SoftEther for years and deserves credit for it. The protocol runs on its servers with Perfect Forward Secrecy, and the company publishes detailed setup tutorials. The catch is the setup itself.
- Not in the app: as vpnMentor found in testing, you download the separate SoftEther client from the protocol’s developers
- Windows only: the manual route works on desktop, not on phones
- Mobile gap: the iOS and Android apps offer WireGuard and IKEv2 only
- Still a real option: it works, it just asks more of you than most people want to give
3. VPN Gate: Free and Volunteer-Run
VPN Gate is an academic project from the University of Tsukuba, the same institution that created SoftEther. Volunteers host public servers, most of them in Japan, and anyone can connect for free. It is the first result many people find, so it is worth knowing what it is.
- Free: no subscription, no account
- Volunteer-hosted: no uptime guarantees, no support, no privacy commitments from the node operators
- Manual setup: you configure the connection yourself
- Best use: fine for testing the protocol, not for a service you depend on
The VPNs That Do Not Support SoftEther
The major providers have all passed on SoftEther, and they have been direct about it:
- NordVPN: no SoftEther. Built NordWhisper for restrictive networks instead.
- Surfshark: no SoftEther. Offers Camouflage Mode and obfuscated servers.
- Proton VPN: no SoftEther. Developed its own Stealth protocol.
- ExpressVPN: no SoftEther. Uses its proprietary Lightway protocol.
- Private Internet Access: no SoftEther. Uses Multi-Hop with a Shadowsocks proxy.
This is worth reading fairly. Each of these companies identified the same problem SoftEther solves and built a proprietary answer instead of adopting an open-source one. Those tools work. The difference is that they are closed, they are tied to that one provider, and none of them is SoftEther.
Running SoftEther Yourself
The fourth route is to skip providers entirely. SoftEther is free, open source, and released under the Apache License, so you can install the server software on your own machine or a rented VPS.
This gives you full control and costs nothing except the server. It also makes you the administrator: you handle setup, updates, uptime, and security. Misconfigure it and you create the exact vulnerability you were trying to avoid.
Self-hosting suits people with the technical background and the appetite for maintenance. For everyone else, a provider that has already done the work is the practical option.
Should You Use SoftEther in 2026?
Yes, for the job it is built for. SoftEther gets through networks that block VPNs, and almost nothing else does it as well.
The HTTPS camouflage on port 443 is hard to filter without breaking normal web traffic, and it can tunnel over ICMP and DNS where everything else fails. It carries AES-256 encryption, delivers gigabit-class throughput, and its code is open source for anyone to inspect.
The trade-offs are modest. Its last independent audit was in 2017, which found eleven vulnerabilities that were promptly patched, and it does not yet offer post-quantum protection.
So SoftEther is the tool you want when a network is actively blocking you, and WireGuard is the easier pick when nothing is in your way. With a provider like GnuVPN, you do not have to choose, because both sit in the same app.
FAQ
Is SoftEther better than WireGuard?
They solve different problems. WireGuard is faster and simpler for everyday use. SoftEther is built to get through firewalls that block VPN traffic, which WireGuard cannot do on its own. If your network blocks VPNs, SoftEther wins. If it does not, WireGuard is usually the better daily choice.
Does NordVPN support SoftEther?
No. Neither do Surfshark, Proton VPN, ExpressVPN, or Private Internet Access. Each built its own obfuscation technology instead, such as NordWhisper, Camouflage Mode, or Stealth. Among commercial providers, support narrows to a small group: GnuVPN runs SoftEther in-app, while CactusVPN needs a separate client.
Can I use SoftEther without a VPN provider?
Yes. SoftEther is free and open source, so you can run your own server or connect to the volunteer-hosted VPN Gate network. Both need manual setup. If you want SoftEther without your own server upkeep, a provider with the protocol built into the app removes that work entirely.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
Company-submitted announcement. Visit their site for details.
