Connect securely from anywhere.

Quick setup

• Install OpenVPN Connect on your phone or laptop.
• Download the matching profile above after signing in.
• Import the .ovpn file and activate the connection.
• Keep the profile private. If it is exposed, revoke it and create a replacement.

Firefox-only browsing

OpenVPN is a device-level tunnel. The OpenVPN profile alone cannot be selected by a Firefox extension. To keep other applications off the VPN, use a local SOCKS5 bridge that is configured to send traffic through the active VPN connection, then select that proxy in Firefox.

Important: this dashboard currently provides the OpenVPN tunnel, not a public SOCKS5 proxy. Never enter an unknown public proxy or expose an unauthenticated proxy on the internet.

1. Install OpenVPN Connect and import the authorized profile above. Connect and confirm the VPN is active.
2. Start your trusted local SOCKS5 bridge on 127.0.0.1:1080. Configure the bridge to use the OpenVPN interface; its exact command depends on your operating system.
3. In Firefox, open Settings → Network Settings → Settings…, choose Manual proxy configuration, enter SOCKS Host 127.0.0.1 and Port 1080, then choose SOCKS v5.
4. Enable Proxy DNS when using SOCKS v5. Leave HTTP and HTTPS proxy fields empty unless your bridge specifically requires them, then save.
5. Open YouTube or Gmail in Firefox and check your public IP. Other applications should retain their normal network path.

Linux users: a network namespace containing OpenVPN plus a SOCKS bridge is the most reliable browser-only design. On Windows and macOS, use a trusted per-application routing/proxy tool; OpenVPN Connect by itself routes the whole device.

If Firefox cannot connect: first test that OpenVPN is connected, then confirm that a SOCKS5 service is listening on 127.0.0.1:1080. A Firefox proxy setting without a running local SOCKS5 service will produce connection errors.

Choose the right mode

Use the option that matches your device and whether you want all applications or only selected browser traffic to use the tunnel.

• Full-device VPN — easiest: import the profile into OpenVPN Connect and connect. YouTube, Gmail, Firefox, and other applications use the VPN. Disconnect when you want your normal route again.
• Firefox-only — desktop: connect OpenVPN, run a local SOCKS5 bridge bound only to 127.0.0.1, and configure Firefox to use it. Other applications do not use the Firefox proxy.
• Linux isolated browser — strongest separation: run OpenVPN and the SOCKS5 bridge inside a dedicated network namespace or container, then launch Firefox in that namespace. This requires local Linux administration and is not created by the dashboard.
• Windows/macOS per-app routing: use OpenVPN Connect together with a trusted per-application routing tool, or use the local SOCKS5 method above. OpenVPN Connect alone is not browser-only.
• Android: import the profile into OpenVPN Connect. Android VPN mode normally covers the device; browser-only routing requires an Android app that supports per-app VPN selection or a local proxy workflow.
• iPhone/iPad: import the profile into OpenVPN Connect. iOS VPN mode normally covers the device; browser-only routing is limited and requires a compatible per-app VPN/proxy solution.

Server status: the current server provides authenticated OpenVPN profiles. It does not currently provide a public HTTP or SOCKS proxy, and no browser extension can replace the OpenVPN client by itself.

Self-hosted Firefox proxy — planned option

When free browser VPN extensions are blocked, a private proxy on your own server can route Firefox only:

Firefox → authenticated encrypted proxy → Saasaal server → internet

Not active yet: no browser-proxy hostname, username, or password is currently published here. Do not try to connect Firefox to vpn.apps.saasal.xyz as a proxy; it is only the protected setup dashboard.

How the finished option will work

1. Open this dashboard and download a private proxy configuration after the proxy service has been deployed.
2. Install the approved local client or Firefox-compatible proxy configuration. The client will keep the proxy bound to your computer and will not expose an open relay.
3. In Firefox, select the supplied proxy profile, enable proxy DNS, and leave other applications on their normal connection.
4. Test YouTube and Gmail, then check the public IP from Firefox only.
5. If the credentials are exposed, revoke that proxy account immediately; never share the configuration publicly.

Required security controls

• Dedicated hostname and TLS certificate, separate from this dashboard.
• Authentication, rate limits, connection limits, and firewall restrictions.
• No anonymous HTTP, HTTPS, or SOCKS proxy access.
• Logs must exclude browsing contents and sensitive credentials.
• Independent testing from the China-side connection before calling it working.

Until this section changes to Active, use the authenticated OpenVPN profile or wait for the self-hosted proxy deployment.