Multi-route virtual private networking

A computer-implemented method comprising:

• obtaining, by a client from a VPN concentrator device, network performance data indicating network conditions between a plurality of VPN concentrator devices and a server;
• generating, by the client, local network performance data indicating network conditions between the client and each of the plurality of VPN concentrator devices;
• analyzing, by the client, the network performance data and the local network performance data to identify a particular VPN concentrator device of the plurality of VPN concentrator devices through which to establish a VPN connection to the server, wherein the particular VPN concentrator device is identified based on a comparison of the network performance data and the local network performance data to one or more policy criteria, wherein the one or more policy criteria include at least two policy criteria from a group of:
• a latency criterion, a packet loss criterion, a jitter criterion, and a VPN concentrator load criterion, and wherein different weights are applied to each of the at least two policy criteria;
• and
• establishing, by the client, the VPN connection to the server via the particular VPN concentrator device.

A system comprising:

• one or more computer processors;
• one or more non-transitory computer readable storage media;
• and
• program instructions stored on the one or more non-transitory computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising instructions to:
• generate, by a VPN concentrator, network performance data indicating network conditions between the VPN concentrator and a server;
• receive, by the VPN concentrator, additional network performance data indicating network conditions between at least one additional VPN concentrator and the server;
• provide the network performance data and the additional network performance data to a client;
• and
• in response to the client analyzing the network performance data and the additional network performance data to determine that a VPN connection to the server via the VPN concentrator satisfies one or more policy criteria, establish the VPN connection between the server and the client via the VPN concentrator, wherein the one or more policy criteria include at least two policy criteria from a group of:
• a latency criterion, a packet loss criterion, a jitter criterion, and a VPN concentrator load criterion, and wherein different weights are applied to each of the at least two policy criteria.