A connection status that names what is wrong
ForestVPN reads the tunnel's own counters and names which of eight states your connection is in. It shows Working only once data is flowing both ways, and when something is wrong it says which layer.
How it works
- 01
Count
The core counts handshakes, packets and probe replies in both directions, on the device.
- 02
Decide
A fixed set of rules turns those counts into one of eight verdicts. Nothing about how you use the tunnel leaves the device to be diagnosed.
- 03
Show
The app shows the verdict that is true right now, every few seconds, with the one action that fits it.
| State | What it means |
|---|---|
| Working | Data is flowing both ways. |
| Idle | Tunnel is up, nothing is sending. The state most often misreported as a fault. |
| Degraded | Carrying traffic, measurably worse than it should. |
| BlockedAtHandshake | Initiations are going out; the far end isn't answering. |
| BlockedAfterHandshake | The session established, then carried nothing. |
| MtuBlackhole | Large packets drop, small ones pass. A different location won't fix it. |
| ExitUnreachable | The path to the exit works; the exit can't reach the internet. |
| UnderlayDown | The local network is down. Nothing further out can be concluded. |
What you get
- A named state instead of a green dot.
- The layer at fault: your network, the path to the exit, or the exit itself.
- The same eight states, with the same names, on every platform.
Limits and honest caveats
- There is no Connected state: it hides too much.
- A verdict is a measurement, not a promise. UnderlayDown means your local network is down, and nothing further out can be concluded.
- Idle is not a fault: the tunnel is up and nothing is sending.
Where it exists
- iPhone
- iPad
- Mac
- Apple TV
- Android
- Android TV
- Windows
- Linux
Plans
Free and Premium both have it.
Questions
- Does the app ever just say Connected?
- No. It shows the state that is true right now, and Working only once data is flowing both ways.
- Does it send my traffic anywhere to diagnose it?
- No. The verdict is computed on your device from counters. A diagnostic report shows you its contents before you send it.
- Why does it say Idle when nothing seems wrong?
- Idle means the tunnel is up and nothing is sending. It is the state most often mistaken for a fault, which is why it has its own name.