Outline VPN — Secure Access Server by Jigsaw (Google)

Introduction

Outline is an open-source VPN platform created by Jigsaw, a subsidiary of Google focused on internet freedom. It makes deploying a personal VPN server as simple as running a single install script, then sharing access keys with users via the Outline Manager desktop app.

What Outline Does

• Deploys a Shadowsocks-based proxy server on any Linux machine or cloud provider with one command
• Provides a desktop Manager app to create, revoke, and monitor access keys without touching the command line
• Offers native client apps for Windows, macOS, Linux, iOS, and Android
• Encrypts traffic using AEAD ciphers making it resistant to deep packet inspection and blocking
• Supports per-key data transfer limits and usage monitoring through the Manager interface

Architecture Overview

The Outline Server runs inside a Docker container, exposing a Shadowsocks proxy endpoint and an HTTPS management API. The Manager app communicates with this API to provision and revoke access keys. Each key maps to a unique port and cipher configuration on the server. Client apps connect using the standard Shadowsocks protocol, tunneling all device traffic through the encrypted proxy.

Self-Hosting & Configuration

• Run the install script on any Linux VPS (DigitalOcean, AWS Lightsail, Linode, or bare metal)
• Open the Outline Manager app on your desktop and paste the server API URL generated during install
• Create access keys in the Manager and share them as ss:// links or QR codes
• Set per-key data limits to manage bandwidth across multiple users
• Update the server by re-running the install script, which pulls the latest Docker image

Key Features

• One-command server deployment with automatic Docker container setup and TLS configuration
• Shadowsocks protocol resists censorship and deep packet inspection better than standard VPN protocols
• Per-user access keys with individual data caps and usage tracking
• Cross-platform client apps with a consistent, simple interface on all major operating systems
• No user accounts or centralized authentication required, just share an access key

Comparison with Similar Tools

• WireGuard — faster kernel-level protocol; Outline prioritizes censorship resistance via Shadowsocks
• OpenVPN — widely supported but complex to configure; Outline automates all server setup
• Tailscale/Headscale — mesh networking focus; Outline is designed for simple proxy access to the open internet
• Algo VPN — similar ease of deployment using WireGuard/IPSec; Outline adds a graphical Manager app and Shadowsocks for anti-censorship
• Streisand — multi-protocol server setup (archived); Outline focuses on a single well-maintained Shadowsocks stack

FAQ

Q: Is Outline a full VPN or a proxy? A: Outline uses Shadowsocks, which is a SOCKS5 proxy. The client apps route all device traffic through it, providing VPN-like functionality with proxy-level censorship resistance.

Q: Which cloud providers are supported? A: The install script works on any Linux server. The Manager app has one-click setup for DigitalOcean, and manual setup works on AWS, GCP, Linode, Vultr, or any other provider.

Q: Can I share access with others? A: Yes. Create multiple access keys in the Manager app and share them as links or QR codes. Each key can have its own data limit.

Q: Is it safe to use in countries with internet censorship? A: Outline was designed with censorship resistance in mind. Shadowsocks traffic is difficult to distinguish from normal HTTPS traffic, making it harder to block than traditional VPN protocols.

Sources

• https://github.com/Jigsaw-Code/outline-server
• https://github.com/Jigsaw-Code/outline-apps
• https://getoutline.org/