Protocols: WireGuard, VLESS and Tor

GANVAS VPN gives you three transports for different needs — from maximum speed to maximum anonymity. Switch them in one tap (Windows) or with a flag (Linux).

WireGuard — speed, by default

A modern, fast, lightweight protocol. The best choice for everyday use: high speed, low latency, quick connect. Runs over UDP.

When: almost always. Downside: on networks that block UDP or do DPI, WireGuard can be detected and blocked — switch to VLESS there.

sudo ganvas connect de        # Linux

VLESS+WS+TLS — beats blocks

Traffic runs over TCP inside ordinary TLS (just like any HTTPS site) via WebSocket, so on the wire it looks like a normal secure connection and resists DPI blocking.

When: if WireGuard can't get through — your ISP blocks UDP or filters VPNs. Downside: slightly slower than WireGuard.

sudo ganvas connect nl2 --vless   # Linux

Tor — maximum anonymity

All traffic goes through the Tor network (several relays; the exit IP is a random Tor node). It's the most private mode — even the server can't see where you go.

When: you need maximum anonymity. Downside: noticeably slower, many sites show a CAPTCHA to Tor exits, and it's TCP-only.

sudo ganvas tor                   # Linux

Which to choose

In short: WireGuard by default; VLESS when you're blocked; Tor when anonymity matters more than speed. More theory in the blog.