tunnelprobe
Online

VPN check for residential VPNs

Tunnelprobe is a free residential VPN check that runs in your browser. It tests your VPN for IP, IPv6, DNS, WebRTC and proxy leaks. It also spots travel routers on your local network. No account needed.

Your home connection optional
More checks Local network
Takes about 15 to 30 seconds

Leak tests

    Travel router check

    We probe common gateway addresses of travel routers, hotspots and home routers. Your browser can't read their replies. But it can tell how fast a connection fails. Two addresses that never exist serve as the baseline.

    Not checked yet.

      AddressTypical forResultTime

      FAQ

      What does this VPN check test?

      It shows what websites can see while your VPN is on. It checks your public IPv4 and IPv6 address, your DNS resolvers, WebRTC, proxy headers, time zone and latency. Each result says if something leaks and how to fix it.

      What is a residential VPN check?

      A residential VPN ends at a home internet connection, not in a data center. Remote workers and digital nomads use it to look like they are at home. A residential VPN check confirms that your exit IP belongs to a home ISP. It also looks for signals that give away your real location.

      How does the DNS leak check work?

      Your browser looks up 15 random hostnames. The name servers of the test services log which resolver asked for them. If a resolver sits outside your VPN exit network, you have a DNS leak. Your local provider can then see every domain you visit.

      What is a WebRTC leak?

      WebRTC lets a website ask STUN servers for your public address. No prompt appears. If UDP traffic skips the tunnel, the website sees your real IP.

      Can websites detect my travel router?

      Sometimes. Travel routers like GL.iNet use well known default addresses. A website can time requests to them. Chrome now asks before a site can reach your local network. Firefox and Safari don't ask.

      Is my data sent anywhere?

      There is no Tunnelprobe server. The test only talks to the public services listed at the bottom of this page. Your settings and history stay in your browser.

      What a browser cannot see

      • Other apps. Mail, messengers and system updates can bypass the tunnel. The browser never sees that traffic.
      • The TCP fingerprint. Servers see TTL, window size and MSS. WireGuard lowers the MTU to 1420, and many VPN detectors look for that. Only a server can measure it.
      • DNS outside the browser. If your browser uses DNS over HTTPS, the DNS leak check tests that path. Other programs still use the system resolver.
      • The kill switch. To see what happens when the tunnel drops, disconnect it on purpose and test again.

      History

      No saved tests yet.