The modern default
WireGuard
A lean, modern protocol built on a small, auditable codebase. Its short cryptographic handshake means connections come up quickly and survive network changes, so switching from Wi-Fi to cellular does not drop the tunnel.
- ChaCha20 encryption
- Fast handshake
- Roaming-friendly
