Regions & status

A VPN server can be perfectly healthy from one country and completely blocked from another. TunnelHQ tests from the regions you choose, tracks a result for each, and rolls them into one status you can act on.

On this page

Any vs. specific regions

By default a monitor tests from Any — TunnelHQ picks a worker and runs the check. That's all you need to answer "is this server up?"

Add specific regions when location matters. Each region you add (Pakistan, Germany, Singapore, and so on) gets its own independent check on every cycle, so you can see that a server is reachable from one place and blocked from another — exactly the kind of thing a single-location check would miss.

Specific regions are a Pro feature

Free and Starter monitors test from Any. Choosing specific regions starts on Pro (up to 5 regions per monitor) and Business (up to 12).

Aggregate status

When a monitor tests from more than one region, TunnelHQ keeps the latest heartbeat per region and rolls them into a single aggregate status:

  • Healthy — every active region is passing.
  • Partial — some regions are reachable and some are not. The server is up, but not everywhere.
  • Degraded — no region could complete a check, and at least one got a definite refusal: the server answered and rejected the credentials or certificate. That's a confirmed configuration problem rather than an unknown, which is why it's shown separately from a check that's still pending. It isn't an alerting state on its own — but it isn't a dead end either: when the monitor recovers from it, that recovery is announced normally.
  • Down — at least one region is failing and none are passing.

The aggregate is what drives the status pill, the dashboard counts, and incident creation, so a multi-region monitor reflects the experience of all your users, not just one vantage point.

Partial-failure alerts

It's your call whether a partial failure is worth a page. Each monitor has a notify on partial switch — on by default once a monitor has more than one region, off for single-region monitors. Turn it off for servers where one blocked region is expected and you only want to hear about a full outage.

Pausing a single region

You can pause an individual region without removing it. The region chip stays in the list (dimmed), the scheduler skips it, and it stops counting toward the aggregate — handy when a probe location is having its own problems and you don't want the noise.

Region codes

Regions use lowercase ISO 3166-1 alpha-2 codes (pk, de, sg, …), plus the special value any. You'll see these in the API and in heartbeat history.