Related guides
Which connection method fits which scenario
Updated
One LeoTun account offers six connection methods: router, OpenVPN, Cisco (AnyConnect), Hiddify, web proxy and private network (Tailscale). None is best everywhere, so instead of a ranking this guide answers by scenario — first by the device you use, then by the network you are on, then by what you want to do — with a pick, the reason and a fallback for each. One rule to remember: all six work on the same account, so if one fails, switch to another.
By device: what you connect from
- One phone, travelling: Cisco or Hiddify. Cisco connects from the official app with just an address and is the steadiest; Hiddify imports by QR code and is faster on lossy links. Fallback: private network.
- Your own computer (Windows, Mac): Hiddify or private network. Hiddify is fast with split routing built in; the private network logs in once and stays online. Fallback: Cisco.
- A company laptop without admin rights: web proxy. Just a browser extension — no admin rights, no changes to the company's network settings.
- iPhone and older devices: Cisco. The system or official client connects without importing anything; best compatibility.
- NAS (Synology, QNAP) and Linux servers: OpenVPN. Import one .ovpn file and it connects at boot; most such devices ship a client.
- TVs, boxes, consoles, grandparents' phones: router. Join the Wi‑Fi and it just works; nothing to install on the device. Any account tier.
- A whole household or office: router, set up once for everything; add the private network if you also want to reach the home NAS from outside.
By network: where you are
- Dormitory or office network that throttles UDP: Cisco. It runs over TLS like any HTTPS site and is steadiest on restricted networks; Hiddify, private network and OpenVPN all use UDP and will slow down or drop.
- Broadband that keeps dropping, weak Wi‑Fi: web proxy. It works request by request with no long-lived connection, so there is nothing to drop.
- Old-building broadband or mobile data with heavy packet loss: Hiddify. Its protocol is built to resist loss and is fastest on such links.
- A corporate VPN already running on the computer: web proxy. Two device-wide VPNs fight over network settings; the web proxy only covers the browser and stays out of the way.
- Other carriers (China Mobile, Great Wall) or unstable cross-border links: any method with the China entry region. The client connects only to a domestic address and we handle the cross-border leg.
By use: what you want to do
- Watching Chinese video from abroad: any device-wide method (Cisco, Hiddify, private network, OpenVPN, router) with the China region; use the router for the TV. Avoid the web proxy for video — it cannot control the device's own network paths, so video sites may still see you abroad.
- Gaming, voice and video calls: Hiddify, private network or router, with the lowest-latency region. The web proxy covers only the browser, so games and calling apps bypass it.
- Office research in the browser only: the web proxy is simplest; if you must reach internal company systems, check whether the company VPN can run alongside ours — if not, use the web proxy.
- Servers, scripts, command line: OpenVPN; Linux desktops can also use the private network or Hiddify.
- Reaching your home NAS or cameras from outside: private network. Devices on one account reach each other with no ports opened on the router.
Quick reference: best for / not for
- Router — best for: households, offices and devices that cannot run a client; built-in split routing and auto-updates. Not for: a single device or someone mostly on the move (you still need a client outside).
- OpenVPN — best for: NAS, Linux servers, OpenWrt routers; one file, connects at boot. Not for: everyday phone and laptop use, where Cisco and Hiddify are handier; UDP-restricted networks.
- Cisco (AnyConnect) — best for: restricted networks, work laptops, iPhones, old devices; best compatibility. Not for: users inside China who don't want everything routed (needs the separate split-routing script).
- Hiddify — best for: speed and lossy networks; QR import, one app on five platforms, split routing built in. Not for: UDP-restricted networks.
- Web proxy — best for: no admin rights, a corporate VPN already on, broadband that keeps dropping. Not for: video apps, games and calls — browser only.
- Private network (Tailscale) — best for: many devices, log in once and forget, reaching home devices from outside. Not for: UDP-restricted networks (relays only, slow) or running alongside another VPN.
Pick the region by your carrier
The same method can differ several-fold in speed between regions because of your carrier's exit to that region, not the server. Northern China Unicom: try Japan and Korea first; southern China Telecom: Southeast Asia (Singapore, Malaysia, Thailand, the Philippines, Indonesia) or Australia; other carriers (Mobile, Great Wall): the China entry region.
The red/yellow/green light on the region list shows each region's live load; among several Japan servers, take the green one. Everyone is slow at the 8–11 pm national peak, and changing region then helps more than reconnecting.
Split routing: Chinese sites direct, others through the route
Only users inside mainland China need split routing; users abroad should use full mode, since splitting sends some sites the long way round. Hiddify switches to "auto split" in the client, the web proxy in the extension, router firmware splits by default; Cisco and OpenVPN route everything after connecting and need the split-routing script from the Cisco section.
If a site fails in split mode, test in full mode first: if it opens, it is not on the list; if it still fails, the site itself is the problem.
When it fails, switch in this order
- Change region first. If another region connects, that one server is temporarily unreachable.
- Change network. If broadband fails, try mobile data and vice versa; interference differs between carriers.
- Then change method. If the UDP methods (Hiddify, private network, OpenVPN) fail, switch to Cisco over TLS; if device-wide methods keep dropping, switch to the web proxy. Blocking of the different protocols is independent.
- Failing that, see the troubleshooting guide or ask in a support group with the method, region, error text and time.
FAQ
Which of the six is fastest?
On lossy networks, Hiddify; on clean networks the difference is small and the bottleneck is region and time of day, not the method.
Which one for gaming and voice calls?
Hiddify, private network or router, with the lowest-latency region. The web proxy covers only the browser, so games and calling apps bypass it.
Can I use several at once?
On different devices, yes — every method shares the account's online-device allowance (2 on Personal, 4 on Family, 8 on Enterprise). On one device, never run two device-wide methods together (say, private network and Cisco); they fight over network settings.
Router or client — must I choose?
No. Use the router at home and a client on the phone outside; each counts as one device.
Which for Linux?
The private network, OpenVPN and Hiddify all have Linux clients; Cisco on Linux uses the open-source OpenConnect; OpenVPN on Linux asks for credentials on the first connection. Servers and NAS are easiest with OpenVPN.
Related pages
- Where we beat other VPNs →
- What the private network (Tailscale) is →
- How to use OpenVPN and when to choose it →
- What a web proxy is and when to use one →
- Tencent Video or iQIYI Blocked Abroad? Fix It in 5 Steps →
- How to Choose a China VPN →
- Does Cisco AnyConnect Work in China? →
- Choosing a VPN Router →
- How to Import a Hiddify Subscription →
- China VPN for Students Abroad →
- Free or Paid China VPN? →
- Flashing the Router Firmware: From Stock to Ours, Step by Step →
- What the Router Firmware Does →
- How to Reach Us and Never Lose Contact →
- How to Recognise a Risky VPN App →
- Which Region Is Fastest from Inside China →
- For the TV and the Grandparents at Home →
- Watching Home Cameras and a NAS in China from Abroad →
- What to Do When iOS Cannot Install an App →
- Cannot Connect, Slow, or Dropping: What to Check →
- Setting Up for Business Trips and Travel →
- On a Company Laptop: No Admin Rights, Corporate VPN Already On →
- Many Devices, One Setup, No Redo on a New Phone →
- Routing a Synology or QNAP NAS →
- Routing a Linux Server and Command-Line Tools →
- “Damaged” on a Mac, and how to verify the installer →
- Using RustDesk for remote help →
- What macOS's Network Extension Approval Is →
- Real vs fake split routing on a VPN router →
- Not enough device slots? Temporary vs long-term fixes →
- Dropbox and other apps want an HTTP / SOCKS proxy — what to do →
- How to Get Good Answers from the AI Support →
- How to manually uninstall the Cisco client on a Mac →
- Cisco error “remote user is disabled” →