You open your VPN on the hotel Wi-Fi, or at school, or in an office, and it just spins on "Connecting…" forever. At home the same app connects in a second. The network is blocking VPNs, and it is surprisingly easy for it to do.
How networks block VPNs
A VPN encrypts your traffic, so the network cannot read it. But it can still recognise that it is VPN traffic, in a few ways.
Ports. Traditional VPN protocols use well-known ports. Blocking those ports blocks the protocol.
Protocol fingerprints. Even on other ports, protocols like OpenVPN and WireGuard have a recognisable shape: the way the connection starts, packet sizes, timing. Firewalls with deep packet inspection can match those patterns without decrypting anything.
Known server addresses. Some networks keep lists of IP addresses belonging to VPN providers and block them.
Allowlists. The strictest networks, including some mobile networks, allow only connections to an approved list of services and block everything else. Ordinary VPN connections are not on the list.
Why your VPN spins instead of failing
When a network silently drops VPN packets, your app does not get an error; it just never hears back. So it keeps retrying, and you see an endless "Connecting…". That is the sign of a block, not a broken app.
What works: stealth protocols
A stealth protocol, also called obfuscation, wraps the encrypted tunnel so it looks like ordinary HTTPS, the same kind of connection your browser makes to any website. To the firewall it is just another secure web connection, so it goes through where standard VPN protocols are stopped.
Stealth mode does not make your traffic invisible: the network still sees that you are connected somewhere and how much data you move. It simply cannot tell that the connection is a VPN, or which sites you visit inside it.
Steps to try, in order
- Turn on stealth or obfuscation mode in your VPN's settings, if it has one. This alone fixes most cases.
- Try a few different servers. Blocks are often uneven; one server may get through when another does not.
- Complete the network's login page first on hotel and guest Wi-Fi, then connect the VPN.
- Switch to mobile data with your phone's hotspot if the Wi-Fi is the problem.
- Update the app. Providers adjust protocols as blocking methods change.
Should you bypass a work or school block?
That depends on the rules you have agreed to. On a guest or hotel network, using a VPN to protect your own traffic is normal. On an employer's or school's network, the acceptable-use policy may forbid it, and IT may have legitimate reasons, so check before you rely on it there.
Choosing a VPN for restrictive networks
- A real stealth or obfuscation mode, not just "fast servers".
- Easy switching between the normal protocol and stealth, so you can use the faster option at home.
- Unlimited data, because you will rely on it daily.
- A specific no-logs policy, because the VPN provider now sits where the network operator did.
- A trial or short plan, so you can test it on the network that is giving you trouble.
Korp VPN on restrictive networks
Korp VPN was built for exactly this. Its stealth protocol makes the tunnel look like ordinary HTTPS, so it connects on hotel, office, school and mobile networks that block standard VPN protocols. It also offers unlimited data and a strict no-logs policy on RAM-only servers. Plans are $4.99 for three months or $17.99 a year on iPhone, Android and Windows.