VPN technology hub
Updated 21 September 2026 · How we research
A VPN is not one technology. It is a stack: a tunnelling protocol that moves your packets, a cipher suite that protects them, a key exchange that authenticates both ends, and a set of operating-system controls that decide what happens when any of those fail. This hub explains each layer and shows where ZoogVPN's implementation sits within it.
How a ZoogVPN connection works
Encryption protects the path to the VPN server; the server then forwards traffic to its destination.
Your device
Original IP and traffic
- ENCRYPTED
ZoogVPN server
Tunnel endpoint and IP exit
- FORWARDED
Internet
Sites see the server IP
Important
A VPN protects network traffic in transit; it does not replace device security, strong passwords or account protection.
The four layers that matter
Tunnelling
How packets are wrapped and moved. See how a VPN works and the protocol comparison.
Encryption and authentication
Which ciphers protect the payload and how each end proves its identity. See VPN encryption.
Failure handling
What happens when the tunnel drops. See kill switches and leak protection.
Routing policy
Which traffic uses the tunnel at all. See split tunneling and router setup.
Traffic visibility
Whether a network can tell you are using a VPN. See obfuscation.
What is recorded
Connection, activity and diagnostic logs are different things. See logging explained.
Choosing a protocol
Most connection problems people blame on a VPN are protocol mismatches. A UDP protocol on a network that throttles UDP will feel broken. A TCP protocol on a long-haul route will feel slow. The decision tree below reflects the trade-offs explained across this cluster.
Choose a ZoogVPN protocol by priority
Availability can vary by platform. Confirm the current app before publishing platform-specific claims.
What matters most for this connection?
Start with the user's network, device and threat model—not a universal “best” protocol.
Speed and daily use
WireGuard
Modern, low-overhead option for streaming, gaming and general use.
Mobile stability
IKEv2 / IPsec
Useful when devices move between Wi-Fi and cellular networks.
Balanced compatibility
OpenVPN UDP
Established option balancing security, speed and compatibility.
Reliability / firewalls
OpenVPN TCP
More retransmission overhead, but often steadier on difficult networks.
Traffic obfuscation
Shadow
ZoogVPN option intended for restrictive or filtered networks.
TLS-based access
ZoogTLS
Specialized option documented for restricted environments.
Source basis: ZoogVPN Help Center protocol guide. Treat performance labels as vendor guidance until independently tested.
Protocols ZoogVPN publishes in its help centre, retrieved 21 September 2026. Availability is stated by the vendor and may change.
| Protocol | Platforms (per ZoogVPN) | ZoogVPN's stated use case |
|---|---|---|
| WireGuard | Windows, macOS, iOS, Android, Linux, routers | Speed and modern use cases such as streaming and gaming |
| IKEv2/IPsec | Windows, macOS, iOS, Android, Linux | Mobile users and keeping a connection alive while switching networks |
| OpenVPN (UDP) | Windows, macOS, iOS, Android, Linux, routers | Balanced speed and security; torrenting and streaming |
| OpenVPN (TCP) | Windows, macOS, iOS, Android, Linux, routers | Stable connections in firewalled environments |
| Shadow | Windows, macOS, iOS, Android | Bypassing censorship in highly restricted regions |
| ZoogTLS | Windows only | Accessing restricted content in heavily filtered networks such as Iran |
According to ZoogVPN
Where to go next
- How a VPN works — tunnelling, routing and what your ISP still sees.
- VPN protocols compared — WireGuard, OpenVPN, IKEv2 and the obfuscated options.
- How to test a VPN — reproducible checks you can run yourself in about fifteen minutes.
- ZoogVPN review — how one provider implements everything described here.