What you need to know
- NordVPN is now rolling out the WireGuard VPN tunneling protocol on all platforms.
- WireGuard offers significant speed benefits to existing VPN standards like OpenVPN.
- The VPN provider started integrating the standard last year on Linux, and it's now available on Android, iOS, Windows, and Mac as well.
- NordVPN is using a double NAT system to ensure privacy, and you can start using the new protocol right away by switching to the NordLynx standard.
If you're using a VPN to protect your privacy while browsing, there's a good chance that your VPN provider is using either OpenVPN or IPSec to create a secure tunnel. These two protocols have been a mainstay for a while now, but they have their drawbacks, particularly when it comes to end-to-end encryption.
Over the last 12 months, WireGuard has emerged as an alternative to the OpenVPN standard. WireGuard offers clear advantages when it comes to speed and is better at maintaining a connection — even on mobile — and as a result it has gained momentum. Essentially, think of WireGuard as the leaner and more secure alternative to OpenVPN and IPSec. WireGuard hit v1 earlier this year for Linux-based builds, and it's now gaining mainstream adoption by way of NordVPN. WireGuard was already available on a few VPNs like Mullvad, and services like IPVN already offer the protocol on all platforms. NordVPN is doing the same now.
NordVPN is one of the best VPNs around for its feature-list and speed, and the service is now offering its users the ability to switch to the WireGuard protocol on all platforms. NordVPN started integrating WireGuard on Linux last year via a new feature called NordLynx, and starting today the protocol is available on all platforms, including Android, iOS, Windows, Mac, and Linux. What this means is that if you're a NordVPN user, you will be able to switch to WireGuard regardless of whatever platform you're using.
While that's a welcome move, there's more to the story. Because WireGuard cannot dynamically assign IP addresses to all devices connected to a server, NordVPN is relying on a double NAT (Network Address Translation) system as a workaround.
This is the basis for the NordLynx feature, and it works like this:
To put it simply, the double NAT system creates two local network interfaces for each user. The first interface assigns a local IP address to all users connected to a server. Unlike in the original WireGuard protocol, each user gets the same IP address.
Once a VPN tunnel is established, the second network interface with a dynamic NAT system kicks in. The system assigns a unique IP address for each tunnel. This way, internet packets can travel between the user and their desired destination without getting mixed up.
The double NAT system allows us to establish a secure VPN connection without storing any identifiable data on a server. Dynamic local IP addresses remain assigned only while the session is active. Meanwhile, user authentication is done with the help of a secure external database.
NordVPN says that by using a double NAT system, it is able to provide the same levels of privacy while leveraging all the benefits on offer with WireGuard. NordVPN also mentions that the new standard "significantly outperformed" the likes of IKEv2 and OpenVPN in internal testing.
For now, NordVPN is sticking to OpenVPN as the default protocol on its service, but that may change based on how NordLynx fares in real-world testing. If you're a NordVPN user and are interested in trying out the new standard, just select the NordLynx protocol from the settings. NordVPN says it is currently rolling out the protocol to all users, and that everyone should be able to access it by April 24.
And if you haven't signed up yet, now is the time to make the switch to NordVPN. With plans starting at just $6.99 a month, there's no reason not to give the service a try.
With a no-logs policy and over 5,600 servers spread across the world, NordVPN is one of the best VPN services around. With the switch to WireGuard, you're guaranteed better connectivity and faster speeds, making an already-great VPN solution even better.
We test and review VPN services in the context of legal recreational uses. For example:
1. Accessing a service from another country (subject to the terms and conditions of that service).
2. Protecting your online security and strengthening your online privacy when abroad.
We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.
We may earn a commission for purchases using our links. Learn more.
From the Editor's Desk: Navigating the Chromebook crunch of 2020
Chromebooks are wonderful little laptops for a great many people, but they're especially well-suited to children. Now if only retailers could keep them in stock this back-to-school season.
Here's every U.S. city with 5G coverage right now
5G deployment is moving fast and the list of cities with coverage is growing all the time. See if your U.S. city has coverage yet by Verizon, T-Mobile, or AT&T.
It's time to stop using SMS for two-factor authentication
Not all 2FA is equal. Using SMS to get a code might not be "better than nothing" after all.
Grab a great case for your Google Pixel 4a!
The Pixel 4a is a great phone for an even greater price, but it isn't the most flashy phone on the market. Thankfully, there are flashy, fashionable, and dependable cases out there you can grab to spice things up!