Choose the Right CLI Version

Download PandaVPN CLI for your operating system and processor architecture, then follow the matching quick start steps to install, log in, refresh nodes, switch modes, connect, and diagnose status.

macOS

System Notes

For macOS users. The installer automatically handles required permission requests, background daemon installation, and startup.

Download

arm64 version amd64 / x86_64 version Universal version

Installation Notes

Download the .pkg installer for your architecture.
Double-click the installer and follow the prompts.
The installer automatically installs and starts the background daemon.
After installation, open Terminal to use the panda command.

Quick Start

# 1. View help
panda help

# 2. Log in
panda login

# 3. Refresh node catalog
panda node refresh

# 4. Set PandaVPN global mode
panda mode pandavpn global

# 5. Optionally enable Kill-switch
panda kill-switch on

# 6. Connect with one command
panda connect

# 7. Check diagnostic status
panda doctor

Linux

System Notes

For Linux users. The Linux version provides a CLI binary and requires users to manually install the background systemd service.

Download

amd64 / x86_64 version arm64 version

Installation Notes

Download the Linux CLI file for your architecture.
Extract it or place it in a system executable path.
Run sudo panda service install to install the background systemd service.
After installation, use the panda command to log in, refresh nodes, connect, and run diagnostics.

Quick Start

# 1. Install background service
sudo panda service install

# 2. View help
panda help

# 3. Log in
panda login

# 4. Refresh node catalog
panda node refresh

# 5. Set PandaVPN global mode
panda mode pandavpn global

# 6. Optionally enable Kill-switch
sudo panda kill-switch on

# 7. Connect with one command
panda connect

# 8. Check diagnostic status
panda doctor

Windows

System Notes

For Windows users. The installer automatically requests administrator privileges and registers the PandaVPN CLI background Windows Service.

Download

amd64 / x86_64 version arm64 version

Installation Notes

Download the Windows installer for your architecture.
Double-click the installer and follow the prompts.
The installer automatically requests administrator privileges and registers the background Windows Service.
After installation, open PowerShell or Terminal to use the panda command.

Quick Start

# 1. View help
panda help

# 2. Log in
panda login

# 3. Refresh node catalog
panda node refresh

# 4. Set PandaVPN global mode
panda mode pandavpn global

# 5. Optionally enable Kill-switch
panda kill-switch on

# 6. Connect with one command
panda connect

# 7. Check diagnostic status
panda doctor

Run panda help first, then log in, refresh nodes, and test the connection. Kill-switch helps prevent IP leaks by blocking non-PandaVPN traffic if the VPN disconnects or the client stops unexpectedly.

Built for Advanced Network Scenarios

Smart Connection & Runtime Support

Automatically chooses the recommended connection method and falls back when needed. Supports PandaVPN and WireGuard runtimes where available.

Routing, DNS & Leak Protection

Control global routing, GFWList, direct-region, proxy-region, custom split rules, DNS policies, fake-IP DNS, and strict Kill-switch with LAN access control.

Automation-ready Diagnostics

Use JSON output and agent-friendly commands such as doctor, status, trace, watch, and log to troubleshoot, monitor, and automate VPN workflows.

Frequently Asked Questions

What is the difference between Panda CLI and the desktop client?

CLI is better suited for automated testing, remote troubleshooting, and scripted connections. Running the legacy Qt desktop client and CLI at the same time is not recommended because it may cause network configuration conflicts.

Why are system-level permissions required after installation?

Creating TUN interfaces, changing system DNS, and applying advanced protection features such as Kill-switch require system-level permissions, so the corresponding platform daemon or service runs in the background.

Why cannot Kill-switch be used together with proxy mode?

Kill-switch is designed to allow traffic only through the TUN tunnel and block all other traffic. Standalone proxy mode does not have a TUN interface, so the two are mutually exclusive. Switch to pandavpn or wireguard mode to use Kill-switch.

PandaVPN CLI Command Line Client

Choose the Right CLI Version

macOS

System Notes

Download

Installation Notes

Quick Start

Linux

System Notes

Download

Installation Notes

Quick Start

Windows

System Notes

Download

Installation Notes

Quick Start

Built for Advanced Network Scenarios

Smart Connection & Runtime Support

Routing, DNS & Leak Protection

Automation-ready Diagnostics

Frequently Asked Questions