Is Amnezia VPN a separate protocol?

No. Amnezia VPN is the client and self-host platform. The WireGuard-compatible obfuscated tunnel it is known for is AmneziaWG. The app can also speak other protocols depending on how you configure the server.

Is VLESS more secure than WireGuard?

Different jobs. WireGuard's crypto and audit surface are excellent for a VPN tunnel. VLESS + REALITY is usually chosen for stealth against censorship, not because the Noise handshake is weak. On an open network, WireGuard remains a solid default.

Why does Hysteria 2 feel faster on bad Wi-Fi?

QUIC plus Hysteria's congestion control (including Brutal when you set bandwidth caps) keeps sending when TCP would back off hard after loss. Independent tests often show Hysteria 2 remaining usable at a few percent packet loss while TCP-based VLESS stalls.

Will any of these hide that I use a VPN?

Stealth protocols hide the protocol fingerprint from DPI. Exit IPs on datacenter ranges are still labeled as VPN/hosting in many IP databases. That is exit reputation, not a tunnel leak. Confirm the address sites see with leak tests.

← Back to Knowledgebase

Knowledgebase

Modern VPN Protocols Compared

WireGuard, AmneziaWG, VMess, VLESS, Hysteria, and Hysteria 2 - what they are, how they differ on speed and censorship resistance, and when to use each.

VPN tunnel vs proxy protocol

Full-tunnel VPNs (WireGuard, AmneziaWG) create a network interface for device traffic. Proxy protocols (VMess, VLESS, Hysteria) forward selected connections unless wrapped in TUN mode. Always verify with leak tests after connecting.

Comparison table

Protocol	Transport	Kind	DPI / stealth	Best fit
WireGuard	UDP	Full-tunnel VPN	Weak - easy DPI fingerprint	Open networks
AmneziaWG	UDP obfuscated	Full-tunnel VPN	Stronger than WG; still needs UDP	WG blocked, UDP open
VMess	TCP/WS/gRPC+TLS	Proxy	Moderate	Legacy configs
VLESS	TCP+TLS/REALITY	Proxy	Very strong with REALITY	Aggressive DPI / censorship
Hysteria	UDP/QUIC	Proxy	Moderate	Legacy 1.x only
Hysteria 2	UDP/QUIC	Proxy	Strong if UDP allowed	Lossy links, long haul

WireGuard

Fast, modern full-tunnel VPN. Distinctive UDP fingerprint makes it easy for DPI to block in censored networks.

AmneziaWG (and Amnezia VPN)

AmneziaWG is an obfuscated WireGuard fork. Amnezia VPN is the multi-protocol client that ships it. Still requires UDP.

VMess

Older V2Ray proxy with built-in encryption. Prefer VLESS for new Xray deployments.

VLESS (with REALITY and Vision)

Lightweight Xray proxy. With REALITY + XTLS Vision over TCP/443 it mimics real HTTPS and is a common choice under aggressive censorship, including in Russia and Iran. Weak on lossy TCP paths.

Hysteria and Hysteria 2

QUIC proxies built for lossy networks. Hysteria 2 is incompatible with 1.x, looks more like HTTP/3, and needs UDP. Prefer 2 for new setups.

How to choose

Open network: WireGuard
WG blocked, UDP open: AmneziaWG
Aggressive DPI / TCP-only: VLESS + REALITY
Lossy Wi-Fi / mobile with UDP: Hysteria 2
Legacy: VMess or Hysteria 1

Frequently asked questions

Is Amnezia VPN a separate protocol?: No. Amnezia VPN is the client; AmneziaWG is the obfuscated WireGuard tunnel.
Is VLESS more secure than WireGuard?: Different jobs - WireGuard for tunnel crypto on open nets; VLESS + REALITY for stealth against censorship.
Why does Hysteria 2 feel faster on bad Wi-Fi?: QUIC and Hysteria congestion control keep throughput when TCP backs off after loss.
Will any of these hide that I use a VPN?: They hide protocol fingerprints from DPI. Datacenter exit IPs can still be labeled VPN/hosting.