Related guides
Which connection method fits which scenario
Updated
One LeoTun account offers six connection methods: router, OpenVPN, Cisco (AnyConnect), Hiddify, web proxy and private network (Tailscale). Each has scenarios where it does best, so this guide answers by scenario — first by the device you use, then by the network you are on, then by what you want to do — with a pick, the reason and a fallback for each. One rule to remember: six methods on one account; there is always one that suits your network.
By device: what you connect from
- One phone, travelling: Cisco or Hiddify. Cisco connects from the official app with just an address and is the steadiest; Hiddify imports by QR code and is faster on lossy links. Fallback: private network.
- Your own computer (Windows, Mac): Hiddify or private network. Hiddify is fast with split routing built in; the private network logs in once and stays online. Fallback: Cisco.
- A company laptop without admin rights: web proxy. Just a browser extension — no admin rights, no changes to the company's network settings.
- iPhone and older devices: Cisco. The system or official client connects without importing anything; best compatibility.
- NAS (Synology, QNAP) and Linux servers: OpenVPN. Import one .ovpn file and it connects at boot; most such devices ship a client.
- TVs, boxes, consoles, grandparents' phones: router. Join the Wi‑Fi and it just works; nothing to install on the device. Any account tier.
- A whole household or office: router, set up once for everything; add the private network if you also want to reach the home NAS from outside.
By network: where you are
- Dormitory or office network that throttles UDP: Cisco. It runs over TLS like any HTTPS site and is steadiest on restricted networks; Hiddify, private network and OpenVPN all use UDP and will slow down or drop.
- Broadband that keeps dropping, weak Wi‑Fi: web proxy. It works request by request with no long-lived connection, so by design there is no connection to drop.
- Old-building broadband or mobile data with heavy packet loss: Hiddify. Its protocol is built to resist loss and is fastest on such links.
- A corporate VPN already running on the computer: web proxy. Two device-wide VPNs fight over network settings; the web proxy only covers the browser and stays out of the way.
- Other carriers (China Mobile, Great Wall) or unstable cross-border links: any method with the China entry region, usually the steadiest on these networks.
By use: what you want to do
- Watching Chinese video from abroad: any device-wide method (Cisco, Hiddify, private network, OpenVPN, router) with the China region; use the router for the TV. Avoid the web proxy for video — it cannot control the device's own network paths, so video sites may still see you abroad.
- Gaming, voice and video calls: Hiddify, private network or router, with the lowest-latency region. The web proxy covers only the browser, so games and calling apps bypass it.
- Office research in the browser only: the web proxy is simplest; if you must reach internal company systems, check whether the company VPN can run alongside ours — if not, use the web proxy.
- Servers, scripts, command line: OpenVPN; Linux desktops can also use the private network or Hiddify.
- Reaching your home NAS or cameras from outside: private network. Devices on one account reach each other with no ports opened on the router.
Quick reference: best for / what to use otherwise
- Router — best for: households, offices and devices that cannot run a client; built-in split routing and auto-updates. With a single device or mostly on the move: installing a client directly is lighter.
- OpenVPN — best for: NAS, Linux servers, OpenWrt routers; one file, connects at boot. For everyday phone and laptop use: Cisco or Hiddify is handier; on UDP-restricted networks, choose Cisco.
- Cisco (AnyConnect) — best for: restricted networks, work laptops, iPhones, old devices; best compatibility. Inside China and wanting Chinese sites direct: add the split-routing script from the Cisco section.
- Hiddify — best for: speed and lossy networks; QR import, one app on five platforms, split routing built in. On UDP-restricted networks: switch to Cisco.
- Web proxy — best for: no admin rights, a corporate VPN already on, broadband that keeps dropping. For video apps, games and calls: use a whole-device method; the web proxy is dedicated to the browser.
- Private network (Tailscale) — best for: many devices, log in once and forget, reaching home devices from outside. On UDP-restricted networks, switch to Cisco; when another VPN is already running on the device, switch to the web proxy.
Pick the region by your carrier
The same method can differ several-fold in speed between regions because of your carrier's exit to that region, not the server. Northern China Unicom: try Japan and Korea first; southern China Telecom: Southeast Asia (Singapore, Malaysia, Thailand, the Philippines, Indonesia) or Australia; other carriers (Mobile, Great Wall): the China entry region.
The red/yellow/green light on the region list shows each region's live load; among several Japan servers, take the green one. 8–11 pm is the national peak, and switching to a green region works best then.
Split routing: Chinese sites direct, others through the route
Only users inside mainland China need split routing; users abroad should use full mode, since splitting sends some sites the long way round. Hiddify switches to "auto split" in the client, the web proxy in the extension, router firmware splits by default; Cisco and OpenVPN route everything after connecting and need the split-routing script from the Cisco section.
If a site fails in split mode, test in full mode first: if it opens, it is not on the list; if it still fails, the site itself is the problem.
When it fails, switch in this order
- Change region first. If another region connects, that one server is temporarily unreachable.
- Change network. If broadband fails, try mobile data and vice versa; interference differs between carriers.
- Then change method. If the UDP methods (Hiddify, private network, OpenVPN) fail, switch to Cisco over TLS; if device-wide methods keep dropping, switch to the web proxy. Blocking of the different protocols is independent.
- Failing that, see the troubleshooting guide or ask in a support group with the method, region, error text and time.
FAQ
Which of the six is fastest?
On lossy networks, Hiddify; on clean networks the difference is small and the bottleneck is region and time of day, not the method.
Which one for gaming and voice calls?
Hiddify, private network or router, with the lowest-latency region. The web proxy covers only the browser, so games and calling apps bypass it.
Can I use several at once?
On different devices, yes — every method shares the account's online-device allowance (2 on Personal, 4 on Family, 8 on Enterprise). On one device, never run two device-wide methods together (say, private network and Cisco); they fight over network settings.
Router or client — must I choose?
No. Use the router at home and a client on the phone outside; each counts as one device.
Which for Linux?
The private network, OpenVPN and Hiddify all have Linux clients; Cisco on Linux uses the open-source OpenConnect; OpenVPN on Linux asks for credentials on the first connection. Servers and NAS are easiest with OpenVPN.