Stealth vs speed: how to choose a VPN protocol

Most VPNs make you pick a side. Stealth or speed. Works everywhere or runs fast. You install the app, you find one mode, and that’s the deal — the network adapts to you, or it doesn’t.

Orion/VPN does it differently. Two modes ship in the same app: Horizon for stealth, Wind for speed. One tap to switch. Same encrypted core, same zero-log promise, same server network behind both. The only thing that changes is how the connection presents itself to your network — and that turns out to be the entire game when it comes to a real-world vpn protocol comparison.

This is a guide for the person picking a VPN today, not the engineer reading the spec sheet. We’ll skip the alphabet soup. The two questions that actually matter are: does it work on my network, and is it fast enough for what I’m doing. Below is how Horizon and Wind answer those questions, and how to decide which one to flip on right now.

Why one mode isn’t enough

A VPN connection has a job to do, and the job changes depending on where you are.

On a hotel Wi-Fi behind a captive portal, in a country with active filtering, on a school or corporate network with deep packet inspection — the job is to not look like a VPN at all. The connection has to blend in with normal web traffic so it never gets flagged, throttled, or blocked. That’s stealth work. It costs a small amount of overhead because the connection is doing extra dressing-up.

On your home fibre, on a friend’s place, on a coffee shop with no filtering — the job is the opposite. Get out of the way. Move bits as fast as the network can carry them. No camouflage tax, no extra layers. That’s speed work.

A single-mode VPN has to compromise. Either it’s stealthy enough to survive restrictive networks but slower than it needs to be on open ones, or it’s blazing fast on open networks but folds the moment you hit a filter. Most providers pick “fast” and pray. A few pick “stealth” and feel sluggish on your home connection. Orion/VPN’s answer is to ship both and let you pick per-network.

Horizon: stealth that works anywhere

Horizon is the stealth vpn mode. Its whole purpose is to look like ordinary, boring, encrypted web traffic that nobody filters because filtering it would break the internet.

Use Horizon when:

• You’re on a network that blocks or throttles VPNs — school, office, hotel, university dorm, airport, corporate guest Wi-Fi.
• You’re in a country or region with active filtering of VPN services. Horizon is built to keep working when generic VPNs stop working.
• You need to use messengers that get blocked locally — see the deep dive on VPN for Telegram and other messengers for why messenger blocks are exactly the scenario Horizon was designed for.
• You don’t know what the network is doing. If you’re not sure whether the Wi-Fi is filtered, Horizon is the safe default — it works on filtered and unfiltered networks alike.

Horizon trades a small amount of peak throughput for the ability to survive. On a clean home connection you might notice a couple of percent of overhead compared to Wind. On a filtered network, that “overhead” is the only reason the connection exists at all. Trade looks great when the alternative is no connection.

Horizon is the right choice for most people, most of the time. If you only ever turn on one mode, make it this one.

Wind: max speed when the network is open

Wind is the fastest vpn protocol Orion/VPN ships. It strips away everything Horizon adds for camouflage and runs lean. The mission is throughput. When your network is friendly and you just want raw performance, Wind is the answer.

Use Wind when:

• You’re streaming 4K and want to push every available megabit. The latency and jitter improvements show up immediately on bandwidth-hungry video — there’s a longer breakdown in the VPN for streaming and geo-blocks guide.
• You’re gaming and care about ping. Wind cuts the per-packet overhead, which translates to lower latency and steadier frame delivery.
• You’re moving big files — backups, game updates, large downloads — and want the VPN to disappear into the background instead of becoming the bottleneck.
• You’re on a trusted, open network where stealth isn’t a concern. Home, family, a friend’s place, a co-working space without aggressive filtering.

Wind is the mode you switch to when you’ve already verified the network is friendly and you want maximum speed. It will be faster than Horizon on the same network, every time. The trade is that on a heavily filtered network, Wind has fewer tricks for blending in, so it’s not the right tool for that job.

When to pick which

If you don’t want to think about it, the cheat sheet is short. Default to Horizon. Switch to Wind on networks you trust when you want raw speed. Done.

If you do want a side-by-side, here’s the vpn protocol guide in one table:

Some practical rules of thumb that come up often:

• Travel. Default to Horizon. You won’t always know what the hotel or airport network is doing, and Horizon will keep working through anything weird.
• Home. Wind by default. You set up your own router, you trust it, you want speed.
• Public coffee shop. Either works. If you’re just browsing, Horizon. If you’re downloading something large, Wind — unless the venue throttles VPNs, in which case flip back.
• Office or campus. Almost always Horizon. Corporate and academic networks are the textbook case for which vpn protocol to use when filtering is in play.
• A new network where you don’t know the rules. Horizon. Always Horizon for the first few minutes. If everything works smoothly and you want more speed, switch to Wind and see if the network minds. If it does, Horizon is one tap away.

What you don’t have to think about

Switching modes does not change anything about your security. Both Horizon and Wind ride the same encrypted core — modern AES-256 authenticated encryption, modern key exchange, the same forward-secrecy properties on every session. There’s a longer explainer on how VPN encryption works if you want the mechanics, but the short version is that the choice of mode is not a security trade-off. It’s a transport trade-off.

Both modes also share:

• The same zero-log policy. Neither mode keeps a record of what you connect to, when, or for how long. Mode choice doesn’t change what’s logged, because nothing is logged either way.
• The same server network. Every region available on Wind is available on Horizon and vice versa. You don’t lose locations by picking stealth.
• The same kill switch and DNS leak protection. If the tunnel drops, traffic stops. That’s true on both.
• The same 10 GB free monthly allowance to start. You can test Horizon and Wind on every network you care about without paying anything.

The choice between Horizon and Wind is purely about how the connection presents itself to your local network. Privacy, encryption, identity, logging — none of that changes. Pick whichever mode survives the network you’re on right now, and you have everything else for free.

How switching modes works

In the Orion/VPN macOS app, the mode picker is on the home screen. Tap Horizon for stealth, tap Wind for speed. The connection re-establishes in a second or two. There’s no setting to dig for, no profile to import, no protocol picker buried in preferences. You don’t need to know what’s underneath; you just pick the weather you want.

A reasonable workflow on a new network:

1. Open the app, leave it on Horizon, connect.
2. Use the network normally for a minute. Browse, send messages, load a video.
3. If everything is smooth, switch to Wind. The connection cycles, you keep going.
4. If Wind feels off — slow handshakes, stalled streams, anything weird — flip back to Horizon. One tap.

That loop takes about ten seconds. After you’ve done it once on a network, you know which mode that network likes, and you can default to it next time you connect.

Pick the weather, not the protocol

The honest version of every vpn protocol comparison article is this: there is no single “best” protocol because networks aren’t all the same. The best mode is the one that survives the network you’re on while giving you as much speed as that network allows. Some days that’s stealth. Some days that’s raw speed.

Orion/VPN ships Horizon and Wind in the same app, on the same plan, with the same 10 GB free per month while you make up your mind. Default to Horizon when you’re not sure. Switch to Wind when you want the throughput. Switch back when the network gets weird. The whole choice takes one tap, and there’s nothing else to learn.