text: what is the best way to create a vpn when client and server both have dynamic ip addresses? i prefer a software tunnel.  i would like to get away from using a dynamic dns service such as tzo.  are there any alternatives? you can do a software tunnel to dynamic dns endpoints.  not sure why you don't like tzo, but there are free dynamic dns services available.  search for free dynamic dns on any search engine.    you can do it without dynamic dns, but you still have to have some way to find the current ip address.  so unless you want to have some one at the site go check and tell you what the current ip address is, you don't have a lot of other options.