Linux Guide
OrbVPN for Linux
Run OrbVPN on your Linux desktop or workstation. A native graphical client is paired with a privileged background helper that owns the VPN tunnel, kill switch, and firewall rules — giving you a clean GUI on top of rock-solid, system-level networking.
How OrbVPN for Linux Works
OrbVPN for Linux is built from the same codebase as the mobile and desktop apps, so it speaks every OrbVPN protocol — Auto (Smart Connect), WireGuard, VLESS, OrbConnect, and SSH Tunnel — with the same anti-censorship transports. Architecturally it has two pieces:
Desktop Client (orbx)
The graphical application you interact with. It runs under your normal user account and provides the connection dashboard, server browser, settings, and the built-in security tools.
Privileged Helper (orbvpn-service)
A small systemd service that runs with the elevated privileges required to create the TUN device, apply firewall rules, and manage routing. The GUI talks to it over a local socket — your account never needs to run as root.
Why a separate helper?
Creating a VPN tunnel on Linux requires privileged access to network interfaces and the firewall. Isolating that work in a dedicated helper service means the graphical app stays unprivileged, which is both safer and more reliable. The two communicate over a local Unix socket at /var/run/orbvpn/orbvpn.sock.
Installation
OrbVPN for Linux is developed and tested primarily on Ubuntu (20.04 LTS and later) and works on Debian-based distributions that ship with systemd. Installing the package places the desktop client on your system and registers the privileged helper service.
Desktop Install (Ubuntu / Debian)
Download the Package
Download the OrbVPN Linux package from the OrbVPN website. Choose the build matching your CPU architecture (x86_64 or arm64).
Install It
Install the downloaded package with your package manager. On Ubuntu and Debian: sudo apt install ./orbvpn_linux_amd64.deb -- apt resolves any required system libraries automatically.
Approve the Helper Service
The installer registers the orbvpn-service systemd unit and asks for your sudo password once to enable it. This is the privileged component that creates the VPN tunnel.
Launch and Sign In
Open OrbVPN from your application menu (or run orbx from a terminal), then sign in with your account. Your subscription and settings sync from the server.
Command-Line Install of the Helper
If you prefer to set up the privileged service yourself, or you are scripting a fleet of machines, the helper binary can register and manage its own systemd unit.
Register the Service
Run sudo orbvpn-service -install to create and enable the systemd unit. The service starts on boot and waits for the desktop client to connect over its local socket.
Run in the Foreground
Use sudo orbvpn-service -debug to run the helper in the foreground with verbose logging — ideal for diagnosing connection issues. orbvpn-service -version prints the build version.
Removing the Service
To unregister the privileged helper, run sudo orbvpn-service -uninstall. This disables and removes the systemd unit. The helper logs to the system journal, so you can follow it with journalctl -u orbvpn-service -f.
The Desktop Client
The graphical client is the everyday way to use OrbVPN on a Linux desktop.
Connection Dashboard
The main window shows your connection status, current IP, selected server, active protocol, and a large one-click connect button at the center.
Server Browser
Browse all available servers with live latency and load information. Filter by country, sort by speed, enable Bridge Mode, and save your favorites.
Settings Panel
Choose your protocol and transport, configure the kill switch, auto-connect, SmartDNS, and split tunneling — all from the graphical settings interface.
System Tray
On desktop environments that support it, OrbVPN places an icon in the system tray for quick access to connection controls without opening the full window.
GNOME Users
GNOME does not natively show legacy system-tray icons. Install the AppIndicator (KStatusNotifierItem) extension from GNOME Extensions to enable the OrbVPN tray icon. KDE Plasma, XFCE, Cinnamon, and MATE show it out of the box.
Protocols & Anti-Censorship on Linux
Every OrbVPN protocol and evasion transport is available on Linux, selected from the Settings panel or chosen automatically by Smart Connect.
WireGuard
The fastest protocol for everyday use, with an optional CDN-fronted WebSocket bridge for restricted networks. Backed by a native WireGuard implementation in the helper service.
VLESS
Reality-TLS masquerading by default, with plain-TCP, WebSocket, gRPC, and Cloudflare CDN-fronting transports plus ten mimicry profiles for deep DPI evasion.
OrbConnect & SSH
OrbConnect's HTTPS tunnel and the SSH Tunnel (including obfuscated OSSH over WebSocket and CDN) round out the stack for the most aggressively filtered networks.
Let Smart Connect Decide
In Iran, Russia, China, and other heavily filtered regions, select Auto (Smart Connect). It races protocols, mimicry profiles, and transports, verifies that real traffic flows and your public IP actually changes, and avoids dead transports — so you do not have to know which combination is working today.
Firewall & Kill Switch
The privileged helper manages your firewall directly to enforce the kill switch and prevent DNS leaks, so no traffic escapes the tunnel.
Automatic Rule Management
When you connect, the helper installs firewall rules for the VPN tunnel interface and DNS leak prevention. When you disconnect, those rules are cleaned up automatically.
Kill Switch Enforcement
With the kill switch enabled, the helper blocks all non-tunnel traffic the instant the VPN drops, ensuring your real IP and DNS queries are never exposed.
Network Device Scanner
OrbVPN for Linux includes the same network device scanner found across the app — a Fing-style map of every device on your local network, complete with a security score.
Discover Every Device
Scan your LAN to list every connected device with its IP, MAC address, vendor, and hostname. Spot unfamiliar devices that may not belong on your network.
Network Security Score
OrbVPN rates your network based on the devices and exposures it finds, highlighting risks and giving you a clear, actionable security score.
System Security Scanner
The desktop security scanner inspects your Linux system for signs of unwanted persistence and suspicious activity.
Persistence & Service Scan
Inspects systemd units and startup locations for unauthorized or suspicious services configured to launch at boot — a common foothold for malware.
Connection Monitor
Surfaces active network connections on your system so you can identify applications making unexpected outbound connections.
Supported Distributions
Ubuntu (Primary)
Fully supported and continuously tested on Ubuntu 20.04 LTS and later. This is the recommended distribution for the best OrbVPN experience on Linux.
Debian-Based
Works on Debian and Debian-derived distributions that ship with systemd, using the same package as Ubuntu.
Other Distributions
Other systemd-based distributions can run OrbVPN, though they are not part of the primary test matrix. Ensure systemd and standard networking libraries are present.
Troubleshooting
VPN Will Not Connect
Check that the privileged helper is running: sudo systemctl status orbvpn-service. Restart it with sudo systemctl restart orbvpn-service, then reconnect from the app.
DNS Leak
If DNS queries bypass the VPN, NetworkManager or systemd-resolved may be overriding settings. The helper manages DNS while connected; ensure no other tool is forcing custom resolvers.
GUI Will Not Launch
Run orbx from a terminal to see error output. Missing graphics or networking libraries are the most common cause; install them with your package manager.
Inspecting Helper Logs
Follow the helper's logs with journalctl -u orbvpn-service -f, or run it in the foreground with sudo orbvpn-service -debug to capture verbose diagnostics.
VPN Protection for Linux
OrbVPN for Linux pairs a clean native client with a privileged systemd helper for reliable, system-level protection. Download and connect on Ubuntu in minutes.