Get Tunna

First Connection Runbook

Run the first Tunna tunnel start step by step: approve the Apple Network Extension, select one node, use simple routing, and check results.

384 words 2 min
Basics Setup, Power, Network Extension

Use this page for the first real tunnel start or whenever you want to rebuild a clean manual baseline before adding automation and complex routing.

A first connection has five quiet stages

Move slowly the first time. A warmed node and a simple routing plan are easier to diagnose than a busy setup with many rules.

  1. Bring in a node

    Create a manual node, scan a QR code, paste a provider link, paste a subscription URL, or accept shared resources from another Tunna device.

  2. Review Resources

    When Tunna opens Resources, review nodes, rules, subscriptions, duplicate warnings, and any fetch status before importing.

  3. Let subscriptions settle

    Managed lists may need time to fetch nodes, usage, expiry, and support details.

  4. Warm health checks

    Leave Tunna open briefly so latency results can guide sorting, ZAP, and node status.

  5. Choose the node

    Select one local node or one subscription node before starting the tunnel.

  6. Start manually

    Use the power control. On the first tap, Tunna installs its Apple Network Extension entry and the system may ask for VPN permission before the tunnel can start.

The first Power tap installs the Apple Network Extension

Tunna cannot carry traffic until iOS or macOS has a VPN configuration for its Network Extension. The first Power tap creates that system entry. After you approve it, later Power taps start and stop the existing tunnel.

Before pressing power

  • At least one local node or subscription node is visible in Outbound.
  • The node details still match the provider profile: protocol, transport, security, address, port, and credentials.
  • The Default Route is simple for the first test, usually Proxy.
  • The current network is available if a subscription or asset must update first.
  • Trusted Networks will not immediately stop the tunnel on the Wi-Fi or cellular network you are using.

Treat node material like a password

Node links, QR codes, subscription URLs, Tunna share links, Reality keys, UUIDs, and passwords can let another device use your server. Share them only with people and devices you trust.