As a medium and tool for network link and data transmission,VPN services that rely on the internet are increasingly becoming an important part of the realization of cybercrime.Due to the lack of targeted regulation of VPN services in criminal legislation,criminal law should focus on the judicial regulation of VPN service provision.First of all,VPN services are value-added services in the pre-normative category,with double restrictions on market access qualifications and business thresholds.Secondly,the act of providing VPN services in criminal justice must adhere to the basic principle of statutory punishment and the concept of modesty in criminal law.Furthermore,the behavior should be divided into"ontological behavior,"which is relatively independent,and"helping behavior,"which is relatively dependent based on the different degrees of"connectedness"as a logical basis.Finally,based on discriminating behavior patterns,the former is applicable to the crime of illegal operation,and the supplementary elements are supplemented to limit it.The latter is applicable to the crime of providing program tools and the crime of refusing to perform the information network security management obligation under the specific distinction between the accessory help behavior and the neutral help behavior.