VpnHood!

What is a farm token?

A farm token is the part of an access key that tells apps how to reach your server farm. VpnHood! MANAGER builds it for you, so you rarely touch it.

What it holds

An access key has two parts. One is its own: an ID and a secret that say who is connecting. The other is the farm token, which says how to reach the farm, and every key of the farm carries the same one.

What every access key of a farm holds VpnHood! MANAGER builds one farm token, and every access key of the farm carries it, beside an ID and a secret of its own. Only the whole key connects. VpnHood! MANAGER builds the farm token the same in every key different in each key access keys Farm token ID and secret Farm token ID and secret Only the whole key connects: a farm token on its own connects nobody.
What every access key of a farm holds VpnHood! MANAGER builds one farm token, and every access key of the farm carries it, beside an ID and a secret of its own. Only the whole key connects. VpnHood! MANAGER builds the farm token the same in every key different in each key Farm token ID and secret Farm token ID and secret Only the whole key connects: a farm token on its own connects nobody.

A farm token holds the farm's domain name and port, the addresses in its keys, its certificate's fingerprint, the locations of its servers, and its farm token URLs.

It is not an access key. It has no ID and secret of its own, so nobody can connect with it. Give your users access keys, never a farm token.

Who builds it

You never write a farm token. MANAGER builds it from the farm's servers and certificate, and builds a new one when they change, for example when a server's address changes.

If it cannot, the farm keeps its last working token and shows a red message: see A farm shows a red message.

How apps get a new token

A key holds the farm token the farm had when you copied the key, so after a change an app still has the old one. It catches up in one of two ways:

  • While it can connect: with Push token to clients on, the app gets the current token as it connects.
  • When it cannot connect: the app reads the token from a farm token URL and tries again, even when every address it knew is gone or blocked.
How a new farm token reaches an app When the farm changes, VpnHood! MANAGER builds a new farm token. An app that can still connect gets it from your server, and an app that cannot connect reads it from a file at a farm token URL. VpnHood! MANAGER builds a new farm token Your server Push token to clients Farm token URL a file on the web The app if it can connect if it cannot connect Either way, the app finds the farm's new address.
How a new farm token reaches an app When the farm changes, VpnHood! MANAGER builds a new farm token. An app that can still connect gets it from your server, and an app that cannot connect reads it from a file at a farm token URL. VpnHood! MANAGER builds a new farm token Your server Push token to clients Farm token URL a file on the web The app if it can connect if it cannot connect Either way, the app finds the farm's new address.

See it and download it

Open the farm's page and select Farm Token. The long text in the dialog is the token, encrypted so that only the farm's keys can read it, so it tells you nothing by itself. Download saves it as a file.

The Farm Token dialog of a farm in VpnHood! MANAGER, with the encrypted token and a Download button
Farm Token on a farm's page: the token is encrypted, so it shows nothing you can read.

When you use it yourself

Most of the time you do not: MANAGER and the apps pass it along by themselves. You handle it by hand only for a farm token URL with Auto Upload set to Off, where you put the file on your site yourself, and again after every change.

What you do decide is whether the farm has farm token URLs. Add them if your servers' addresses may change or get blocked, and add them before you give out keys, as a key carries the URLs the farm had when you copied it.

Next steps