ZoogTLS
Updated 21 September 2026 · How we research
ZoogTLS is ZoogVPN's second in-house transport. ZoogVPN describes it as based on OpenConnect with TLS encryption, and lists it on Windows only.
Vendor-documented and unverified
Unlike Shadow, ZoogTLS is not entirely unspecified: ZoogVPN says it is based on OpenConnect, which is open source and publicly documented. What ZoogVPN has built on top of it is not published, and we have not tested it.
What ZoogVPN says
According to ZoogVPN
ZoogVPN's help centre describes ZoogTLS as "a highly secure option based on OpenConnect with TLS encryption, ideal for accessing restricted content in Iran, though less suited for speed-intensive activities". It is listed for Windows only, with very stable performance, very strong encryption and moderate speed.
Why TLS-based transports exist
Every network must allow TLS on port 443 or the web stops working. A tunnel that presents a genuine TLS handshake therefore blends into the largest possible pool of traffic. The cost is overhead: you are running an encrypted tunnel inside an encrypted session, usually over TCP, which brings back the TCP-over-TCP behaviour described in OpenVPN TCP vs UDP. That is consistent with the moderate speed rating.
Platform limitation
Availability as published by ZoogVPN on 21 September 2026.
| Platform | ZoogTLS listed? | Practical alternative |
|---|---|---|
| Windows | Yes | — |
| macOS | No | Shadow |
| iOS | No | Shadow |
| Android | No | Shadow |
| Linux | No | OpenVPN TCP on port 443 |
| Routers | No | OpenVPN TCP on port 443 |
Choose based on your own risk
ZoogVPN names a specific heavily filtered country in its description. If you are in that situation, treat any single tool as fallible, understand the local legal position, and do not rely on marketing language for a decision that carries personal risk.