WireGuard

WireGuard is a VPN protocol designed to be simple, fast and secure. Where older protocols carry decades of options, WireGuard is deliberately minimal — a few thousand lines of code — which makes it easier to audit and less prone to misconfiguration. It uses a fixed, modern set of cryptographic primitives rather than a menu of negotiable ciphers, so there is little to get wrong. It runs over UDP and typically connects faster and performs better than OpenVPN or IKEv2.

Each peer has a public/private key pair; a connection is defined by exchanging public keys and allowed IP ranges. WireGuard establishes an encrypted tunnel over UDP with a quick handshake and uses forward-secret keys. Because it stays quiet when idle and roams cleanly between networks, it is well suited to mobile devices. Its lean design gives it low latency overhead, though you may need to tune the MTU on some links to avoid fragmentation.

s4m supports WireGuard and OpenVPN profiles. The issued profile and client routing determine the exit and which traffic follows the tunnel. s4m has selectable public exit configurations. Use the endpoint or profile issued for the protocol and location selected in your account. Consult the published privacy policy and technical descriptions for their scope; IP assignment alone does not establish a no-logs or anonymity guarantee. Related topics: VPN, OpenVPN, no-logs, RAM-first, VPN page.