1-RTT connect
The client sends tunnel data in the very first packet after the handshake. No extra round trips before you're online.
Original protocol · UDP · 1-RTT
The VPN built to
disappear from the wire.
Ping is a from-scratch VPN protocol engineered for one thing: the lowest possible round-trip. A single-round-trip handshake, multiplexed channels, and seamless roaming mean the tunnel adds almost nothing to your ping.
- Handshake
- 1 RTT
- Cipher
- ChaCha20-Poly1305
- Roaming
- sub-RTT
What you get
A tunnel that gets out of the way.
Channel multiplexing
DNS, control, and bulk traffic ride separate logical channels in one session, so a slow lookup never blocks your game or call.
Seamless roaming
Switch Wi-Fi to LTE, wake from sleep, change networks — the session survives and recovers in under a round-trip. No reconnect screen.
Unprobeable endpoint
The server answers nothing without a valid key. To a scanner the port looks closed, so there is no fingerprint to block.
Forward secrecy
Ephemeral keys per session and an automatic rekey every two minutes — with zero dropped packets at the switch.
Split tunneling
Choose which apps and sites go through Ping and which stay direct. The rest of your traffic never leaves your own route.
Under the hood
The path of one packet.
Every stage below exists to remove delay, not add it.
-
es
Key agreement
X25519 ephemeral + static exchange, Noise-IK-derived, with an optional per-user pre-shared key mixed in for defense in depth.
-
ad
Sealed frame
The 16-byte header is authenticated as associated data; everything after it is ChaCha20-Poly1305 ciphertext, indistinguishable from random.
-
mx
Mux & pace
Frames from multiple channels coalesce into one MTU and are paced to the measured path rate — filling the pipe without building a queue.
-
rt
Route & roam
Sessions are keyed by index, not address, so your packet still lands after a network change — authenticated before the endpoint moves.
Read the full PING/1 specification →
Three steps
From key to connected.
01
Get your key
Your admin generates a key in P-panel and sends you one ping:// line. That's your whole config.
02
Paste it in Ping
Open the Windows app, paste the key, and it's saved as a profile. No servers list, no manual settings.
03
Press connect
One button raises the tunnel. Split-tunnel rules, autostart, and the connection log are all right there.
Get the Windows client
Runs elevated, opens a Wintun adapter, and connects with a single key. Windows 10 and 11, 64-bit.
Unzip the folder, then run Ping.exe as administrator. No .NET install needed — the runtime is bundled.