VPN app on iPad. R9000 firmware 1.05.36

Using R9000 as router. VPN APP on iPAD. Seems to work fine regarding locations/country. However, i am curious if it is encrypted when leaving the wan gateway out to the internet. To be sure, do i need to open a port on the R9000 ?? A port used for vpn for example 443? Or another port?