LeoTun

Internet Freedom Alliance

2026-10 sing-box upgraded: old configs no longer work. Sign in and re-scan the code on the sing-box page, once per device.
2026-08 We are now LeoTun (formerly RoyalShield). Your account, servers, pricing and setup are unchanged — no action needed. The name shown on payment pages and in emails is updated accordingly.
2026-08 Private network is now live: no server picking, no config changes — your devices connect directly for a faster, steadier link. Find it under "Private" in the top nav.
2026-09 New router firmware is out — please update. OpenVPN is back: download a profile, import it, and connect in one tap.
2026-09 Every page now ends with related guides — usage basics, common problems and fixes, and typical scenarios — to help you understand the VPN system and use it more smoothly.
2026-09 Hong Kong is back (ChatGPT and Claude are not available there — pick a Southeast Asia server if you need them). Iceland has been retired.
2026-09 Price update, bigger discounts: Family 8 USD/month, Enterprise 16 USD/month; discounts start sooner (Family from 6 months, Enterprise from 3 months). Time you've already paid for — including annual plans — is not affected.
2026-09 New Personal plan: 4 USD/month for 2 devices, routers included — everyone should have a VPN router.
HomeRouterOpenVPNCiscoHiddifyProxyPrivateContact

Related guides

Where We Beat Other VPNs

Updated 2026-10-01

The short answer to “why choose us”: what takes several products elsewhere, LeoTun does with one account. Phones, computers, routers, NAS and TVs can all connect; the router is not a tutorial you fight through but a finished product you log in to once for the whole household; split routing works per whole website and every device follows the same rules; going out of China and getting back in are two directions of the same account; and routes are tuned separately for China Telecom, Unicom and Mobile. We have run our own servers since 2007 and serve one thing only — users in mainland China and Chinese people overseas. Below, each advantage in concrete terms, followed by answers to the concerns people usually raise.

Advantage 1: every platform, one account

  • Every system: Windows, macOS, iOS, Android and Linux each have a client; OpenWrt routers, Synology and QNAP NAS and Linux servers can import a profile directly.
  • Devices that cannot run a client work too: smart TVs, TV boxes, game consoles, smart speakers and an elderly relative’s phone only need to join the router’s Wi‑Fi — nothing to install on the device.
  • Six connection methods, switch any time: router, OpenVPN, Cisco (AnyConnect), Hiddify, web proxy and the private network (Tailscale) all use the same account. A restrictive campus network — switch to Cisco. Lossy broadband — switch to Hiddify. A work laptop without admin rights — use the web proxy. No second account, no extra charge.
  • The client cannot be taken away: we do not make our own app. Every client comes from the official upstream — Cisco, OpenVPN, Hiddify, Tailscale — and is offered unmodified. Many VPNs depend on one in-house app; once it is identified or removed from the store, the whole service stops. Here the most that gets blocked is one address, and the address is replaced.
  • By comparison: global brands’ apps were not designed for the Chinese network and often stop working there; “airports” hand you a subscription link and leave the client to you; free apps mostly cover one platform, or are just a browser extension.

Advantage 2: mature router access

Most VPNs’ router support stops at “here is a manual configuration guide”. Whether it works, whether it stays stable and who helps when it breaks are the user’s problem. We built the router into a complete product line.

  • Two ways to get one: buy a pre-installed router, plug it in and log in on its admin page; or use your own router and flash firmware generated on this site for your model.
  • Log in once, the whole household is covered: every device on that router takes the route automatically, and changing region is one click on the admin page for everyone at once.
  • Automatic updates, no reflashing: when a route address changes or the split-routing list gains a new site, the router updates itself at boot. You do nothing.
  • Router access is available on all three account tiers — Personal, Family and Business — not reserved for the expensive one; binding and replacing a router is self-service on the site.
  • Four models on sale cover travel, small households, device-heavy homes and mobile use without broadband; see the guide on choosing a router.
  • Someone is responsible: we maintain the firmware ourselves, so router problems can be raised directly in the support groups, with remote assistance when needed.

Advantage 3: real split routing, not “looks split”

Split routing means traffic that should take the route takes it and the rest goes direct. Many products only do part of this, which shows up as Chinese sites getting slower once the VPN is on, pages that load while their video does not, or a TV that ignores the rules. Real split routing is available on two of our connection methods: the router and the private network (Tailscale). What it delivers:

  • Whole-site routing: a website goes one way together with its images, video and login, so you never get a page that opens with a video that will not play.
  • No detour for Chinese sites: in the outbound direction Chinese sites open directly, as fast as without the router.
  • One rule set for the household: phones, computers, TVs, boxes and consoles all follow the same rules, even if a device has changed its own network settings.
  • Direction is automatic: choosing a China region means the inbound direction, choosing an overseas region means outbound — two opposite rule sets you never switch by hand.
  • Lists update themselves and settings persist: when a site moves or a new app appears the list follows; after a reboot or reconnect, split routing is as you left it.
  • Printers, NAS and cameras at home are unaffected and stay directly reachable on the local network.
  • How this differs from the usual approach: what most providers call split routing is a script on the computer that sends Chinese IP ranges direct. That only covers the one computer and cannot deliver the points above. Our download center does offer such a direct-for-China tool for Cisco and OpenVPN, for people who cannot use the router or the private network yet; to get everything listed above, use the router or the private network.

Advantage 4: out of China and back in, one account

  • Reaching overseas sites from inside China and reaching Chinese services from abroad are the same account with a different region — not two products.
  • The China region runs on real mainland machines, not Hong Kong or Taiwan IPs standing in — which is what Tencent Video, iQIYI and online banking require. Many global VPNs have no China-return feature at all, or offer Hong Kong and Taiwan nodes.
  • There are 24 regions in all; each has several machines behind it and the system picks the least busy one when you connect, so there is no speed-testing of nodes.

Advantage 5: tuned for the Chinese network

  • Per-carrier tuning: the international exits of China Telecom, Unicom and Mobile differ enormously, so we tune each separately and recommend different regions depending on your broadband.
  • Entry points inside China: users on mediocre broadband still have a stable way in.
  • Standard protocols only: the traffic looks like ordinary corporate remote access or web browsing rather than a proprietary protocol with a fixed fingerprint.
  • Continuous maintenance: we keep adjusting as the domestic network changes, and an address that stops working is replaced automatically — the address saved in your client stays the same.

Advantage 6: long-running, with someone responsible

  • In operation since 2007 on our own machines, not rented capacity resold; accounts, expiry dates and prices did not change across the rename.
  • Support groups around the clock: an AI assistant answers at any hour in the Telegram, QQ and Discord groups, in any language, and you can send a screenshot of the error; refunds and billing are handled by a person.
  • The site is in 17 languages, with written and video tutorials for every section; when that is not enough, remote assistance is available.

Advantage 7: flexible payment, try before you buy

  • A 24-hour free trial with no credit card, to test on your own network.
  • Pay by the day: occasional users can activate single days with points instead of a monthly plan.
  • Personal, Family and Business tiers can be switched at any time, with remaining time converted at equal value; need a few more devices for a while — go up a tier, then switch back.
  • Refunds are pro-rated by time used and available at any time.
  • Invite a friend who pays and you receive 30 days (Personal tier; other tiers at equal value), with no limit on the number of friends.

Side by side with the three common kinds of product

  • Global brands: many servers and polished apps — a good fit if you live in Europe or America and only want encryption on public Wi‑Fi. But the product was not designed for the Chinese network, the app tends to stop working there, the China-return feature is missing or uses Hong Kong and Taiwan IPs, and routers get a manual setup guide.
  • “Airports”: cheap, with many nodes. But most rent overseas machines and resell traffic, the client is yours to sort out, router and split-routing rules are do-it-yourself, disappearing, renaming and shutting down are common, and nobody is responsible when something breaks.
  • Free apps: no cost. But they survive on throttling, data caps or selling data, most cover a single platform or a single browser, and an installer of unknown origin is a risk in itself — see the guide on recognising a risky VPN app.
  • LeoTun: every platform, a finished router product, real split routing, both directions, per-carrier tuning and long-running operation with support — all in one account.

Concerns you may have, answered one by one

  • “You cost more than an airport”: the Personal tier starts at 4 US dollars a month with volume discounts; occasional users can pay by the day at about 0.32 dollars; take the 24-hour trial first, and a pro-rated refund is available at any time. The difference pays for our own machines, a finished router product, real split routing and support that someone is responsible for.
  • “Only 24 regions, not hundreds of nodes”: more nodes does not mean more stable. Each region has several machines behind it, the system picks the least busy one when you connect and replaces an address that stops working — you never speed-test, pick or swap nodes.
  • “No one-tap app of your own”: that is deliberate. Official clients from Cisco, OpenVPN, Hiddify and Tailscale — large vendors and well-known open-source projects — are more trustworthy than an app from a small unknown publisher: the code and the signature are not in our hands, so we cannot tamper with them and they cannot be pulled from the store. The first time you scan a code or import a profile; that is the only extra step.
  • “Are you an anonymity service?”: no, and we do not advertise as one. But the only thing we store that can be tied to you is an email address and nothing else: registration asks for no phone number and no real name; all other data is anonymous — only the email is not. All data is stored outside China. We do not record the sites you visit, inspect traffic, inject ads or sell data.
  • “What speed do you guarantee?”: no megabit figure, because cross-border bandwidth depends on the carrier’s exit, the time of day and your local broadband. What we do guarantee is something concrete: YouTube video plays smoothly even at the evening peak. If one region is slow, change region or connection method.

FAQ

Is my device supported?

Phones, tablets, computers (Windows, macOS, Linux), OpenWrt routers and Synology and QNAP NAS each have a matching connection method; TVs, boxes and consoles that cannot run a client connect through the router. Which method suits which device is covered in the guide on connection methods by scenario.

How is real split routing different from what others call split routing?

The difference is completeness: whether a whole site is routed together with its video, images and login; whether Chinese sites are mistaken for foreign ones and sent the long way round; whether every device at home follows the same rules. The symptoms and how to verify it yourself are in the guide on real versus fake split routing.

Why not offer hundreds of nodes like the airports?

More nodes does not mean more stable. Each of our regions has several machines behind it and the system picks the least busy one, so you never speed-test nodes; a blocked address is replaced automatically and the address in your client stays the same.

Could it be cheaper?

The Personal tier is 4 US dollars a month with volume discounts (5% off from 12 months, up to 20% off); by the day with points it is about 0.32 dollars; invite a friend who pays and you gain 30 days (Personal tier), with no limit. There is no permanent free tier — the cost structure does not allow it.

How can I verify these claims?

Take the 24-hour trial. At the evening peak, connect to the China region and watch an episode on Tencent Video, connect to an overseas region and open YouTube, and check the IP location and an IPv6 test page. The checklist is in the guide on choosing a China-return VPN.

What was LeoTun called before?

Before August 2026 it was called ViPiN — same company, same team, same service; accounts and prices did not change, only the name. The English name changed from RoyalShield to LeoTun in September 2026.

Related pages

  • Which connection method fits which scenario →
  • How to choose a VPN router →
  • Real vs fake split routing on a router →
  • How to recognise a risky VPN app →
  • Free or paid China VPN? →
  • About us: how it is built, what we log →
  • Tencent Video or iQIYI Blocked Abroad? Fix It in 5 Steps →
  • How to Choose a China VPN →
  • Does Cisco AnyConnect Work in China? →
  • How to Import a Hiddify Subscription →
  • China VPN for Students Abroad →
  • What a Web Proxy Is and When to Use One →
  • What the Private Network (Tailscale) Is →
  • How to Use OpenVPN and When to Choose It →
  • Flashing the Router Firmware: From Stock to Ours, Step by Step →
  • What the Router Firmware Does →
  • How to Reach Us and Never Lose Contact →
  • Which Region Is Fastest from Inside China →
  • For the TV and the Grandparents at Home →
  • Watching Home Cameras and a NAS in China from Abroad →
  • What to Do When iOS Cannot Install an App →
  • Cannot Connect, Slow, or Dropping: What to Check →
  • Setting Up for Business Trips and Travel →
  • On a Company Laptop: No Admin Rights, Corporate VPN Already On →
  • Many Devices, One Setup, No Redo on a New Phone →
  • Routing a Synology or QNAP NAS →
  • Routing a Linux Server and Command-Line Tools →
  • “Damaged” on a Mac, and how to verify the installer →
  • Using RustDesk for remote help →
  • What macOS's Network Extension Approval Is →
  • Not enough device slots? Temporary vs long-term fixes →
  • Dropbox and other apps want an HTTP / SOCKS proxy — what to do →
  • How to Get Good Answers from the AI Support →
  • How to manually uninstall the Cisco client on a Mac →
  • Cisco error “remote user is disabled” →

Flags by Twemoji (CC-BY 4.0)·IP Geolocation by DB-IP

AboutGuidesContact

© 2007–2026LeoTun