refine VPN mode