Protocol Guide
VPN Protocols
OrbVPN supports three powerful VPN protocols, each engineered for different use cases. Understand their strengths and choose the right one for your situation.
Protocol Overview
A VPN protocol defines how your data is encrypted, transmitted, and authenticated between your device and the VPN server. Different protocols make different tradeoffs between speed, security, and the ability to bypass network restrictions. OrbVPN gives you the flexibility to choose the protocol that best matches your current needs.
WireGuard
Fast, modern, and lightweight. The newest generation of VPN protocol technology with exceptional speed.
VLESS
Lightweight and censorship-resistant. Designed to blend in with regular HTTPS traffic to avoid detection.
OrbConnect
OrbVPN's proprietary enterprise-grade protocol with advanced obfuscation and maximum security.
WireGuard
WireGuard is a modern, open-source VPN protocol that has rapidly become the industry standard for high-performance VPN connections. Its lean codebase and state-of-the-art cryptography deliver exceptional speed with minimal overhead.
Best-in-Class Speed
WireGuard's streamlined architecture and efficient cryptographic primitives deliver the fastest speeds of any VPN protocol, often with negligible impact on throughput.
Modern Cryptography
Uses ChaCha20 for encryption, Poly1305 for authentication, Curve25519 for key exchange, and BLAKE2s for hashing. All state-of-the-art algorithms.
Minimal Attack Surface
With roughly 4,000 lines of code compared to hundreds of thousands in older protocols, WireGuard has a dramatically smaller attack surface.
Instant Connections
WireGuard establishes connections in under a second. Roaming between networks is seamless with near-zero reconnection time.
When to Use WireGuard
Best For
Streaming, gaming, large downloads, video calls, and any activity where speed is the top priority. WireGuard is the recommended default protocol for most users in unrestricted network environments.
Considerations
WireGuard traffic has a recognizable signature. In networks that actively block VPN protocols through deep packet inspection, WireGuard connections may be detected and blocked. In such environments, consider VLESS or OrbConnect instead.
VLESS
VLESS is a lightweight, proxy-based protocol designed for environments where traditional VPN protocols are blocked. It disguises VPN traffic as regular HTTPS web browsing, making it extremely difficult for firewalls and censorship systems to detect.
Censorship Resistance
VLESS traffic mimics standard HTTPS traffic, making it nearly indistinguishable from regular web browsing to deep packet inspection systems.
Lightweight Design
Minimal protocol overhead means VLESS maintains excellent speeds while providing strong obfuscation capabilities.
TLS Encryption
All traffic is wrapped in TLS 1.3 encryption, identical to the encryption used by secure websites, providing both security and stealth.
Firewall Bypass
Passes through most corporate firewalls, school networks, and government censorship systems that block traditional VPN protocols.
When to Use VLESS
Best For
Restricted networks, regions with internet censorship, corporate environments that block VPN traffic, and any situation where WireGuard connections are being detected and blocked.
Considerations
VLESS may have slightly higher latency than WireGuard due to the additional TLS wrapping layer. For unrestricted networks where speed is the sole priority, WireGuard typically delivers better raw performance.
OrbConnect
OrbConnect is OrbVPN's proprietary, enterprise-grade VPN protocol. It combines the best aspects of modern VPN technology with advanced obfuscation techniques and additional security layers developed by the OrbVPN engineering team.
Enterprise Security
Multiple layers of encryption with proprietary key exchange mechanisms provide the highest level of security available in any VPN protocol.
Advanced Obfuscation
OrbConnect uses sophisticated traffic shaping and obfuscation techniques that make VPN traffic undetectable to even the most advanced inspection systems.
Adaptive Performance
Dynamically adjusts its operating parameters based on network conditions to maintain optimal speed without sacrificing security.
Traffic Verification
Built-in data integrity verification ensures your traffic has not been tampered with, intercepted, or modified during transit.
When to Use OrbConnect
Best For
High-security environments, enterprise deployments, networks with advanced censorship systems, and any situation where you need the strongest combination of security and obfuscation.
Considerations
OrbConnect may use slightly more battery and CPU resources than WireGuard due to its additional security layers. This is a worthwhile tradeoff for users in environments that demand maximum protection.
VLESS Transport Options
VLESS supports multiple transport layers that determine how traffic is carried between your device and the VPN server. Each transport option offers different advantages depending on your network environment.
TCP Transport
The default transport. Reliable and connection-oriented, TCP ensures all data arrives in order. Best for general use where stability is more important than raw speed.
UDP Transport
Faster and lower latency than TCP. UDP skips connection overhead and retransmission delays, making it ideal for streaming, gaming, and real-time applications.
HTTP Transport
Carries VLESS traffic inside HTTP requests, blending seamlessly with regular web traffic. Effective on networks that heavily inspect non-HTTP protocols.
TLS Variants
Wraps the transport layer in TLS encryption for maximum security and stealth. Combines the benefits of the chosen transport with an additional encryption layer identical to HTTPS.
To select a transport option, navigate to Settings > Connection > VLESS > Transport and choose the transport that best matches your network conditions. If unsure, leave it on the default TCP transport -- it works reliably in most environments.
Transport Recommendation
Use TCP for reliability, UDP for speed, HTTP for restrictive networks, and TLS variants when you need maximum encryption and stealth. Auto mode in Smart Connect can also select the optimal transport for you.
Protocol Comparison
Use this guide to quickly determine which protocol suits your current situation.
Speed
WireGuard leads in raw speed, followed by VLESS, then OrbConnect. All three protocols deliver performance suitable for streaming and general use.
Censorship Resistance
OrbConnect provides the strongest obfuscation, followed by VLESS. WireGuard is the easiest to detect and block.
Security
All three protocols provide strong encryption. OrbConnect adds extra security layers and traffic verification for maximum protection.
How to Switch Protocols
Changing your VPN protocol is simple and takes effect on your next connection.
Disconnect if Active
If you are currently connected to the VPN, disconnect first. Protocol changes cannot be applied during an active session.
Open Protocol Settings
Navigate to Settings and tap on Protocol Selection, or use the protocol selector on the main connection screen.
Choose Your Protocol
Select WireGuard, VLESS, or OrbConnect from the available options. A brief description of each protocol is displayed to help you decide.
Reconnect
Return to the main screen and tap the connect button. OrbVPN will establish a new connection using your selected protocol.
Protocol and Server Availability
Not all servers support every protocol. When you switch protocols, the server list updates to show only servers that support your selected protocol. Your previously selected server may change if it does not support the new protocol.
Three Protocols, One Mission
Whether you prioritize speed, stealth, or security, OrbVPN has the right protocol for you. Download now and experience the difference.