Gluetun: The Complete Beginner's Guide

Gluetun: The Complete Beginner's Guide

If you've just discovered Gluetun and aren't sure where to begin, this guide walks you through everything from your first pull to a fully protected connection. Gluetun is a lightweight VPN client that runs inside a container, giving you a single, provider-agnostic way to route traffic through an encrypted tunnel with a built-in kill switch.

What Is Gluetun?

Gluetun is a free, open-source VPN client packaged as a container image. Instead of installing a different desktop app for every VPN service, you run one small container that connects to the provider of your choice using WireGuard or OpenVPN. Any other app or container can then route its traffic through Gluetun, staying protected even if the tunnel drops.

Gluetun docker run command in a terminal

How To Start

Getting a connection up is quick, and everything is free:

  • Install a container runtime such as Docker or Podman on your machine or home server.
  • Pull the Gluetun image and set a few environment variables for your VPN provider.
  • Start the container — the kill switch (firewall) turns on automatically.

For a full copy-paste setup, follow our Docker Compose guide.

What To Expect As A Beginner

The environment variables are your main control surface. You choose a provider, a protocol, and a region, and Gluetun handles the tunnel, DNS, and firewall for you. Once it reports healthy, your traffic is protected.

Heads up: Gluetun is a VPN client — you still need an account with a supported VPN provider (or credentials it can generate). It does not provide the VPN servers itself.

Tips For Your First Run

  • Start with WireGuard if your provider supports it — it's faster and simpler to configure.
  • Check the logs after launch to confirm the tunnel came up and the health check passes.
  • Test your public IP from inside the network to verify the VPN is actually in use.

Final Thoughts

Gluetun is small, flexible, and unlike a typical desktop VPN app — it's built to protect entire stacks of services. Approach it one variable at a time, and you'll have a rock-solid tunnel in minutes. When you're ready for more, explore our guides on features and pro tips.