VPN setup: make the configuration explainable

Build a useful understanding.

A useful setup has a known baseline and a reason for every exception. This collection focuses on the controls that affect where traffic goes, how the connection behaves during interruptions, and how to investigate unexpected results. It is a learning resource rather than a set of commands to paste into an unknown device.

Begin with the documented defaults for your exact app and platform. Read the protocol guide for connection options, the kill-switch guide for failure behavior, and the split-tunneling guide before excluding an application. DNS and performance troubleshooting can then build on a configuration you already understand.

Keep a short change record: the original setting, the adjustment, the task tested, and the outcome. Restore unsuccessful experiments instead of accumulating them. For managed devices, use the administrator's approved process. The objective is not to expose every advanced option; it is to know how your actual configuration behaves and how to recover when it does not.