In the app, you don't choose
The VPNBaron app includes Baron Pathfinder. It tests the available routes and connects you through the best one automatically. Protocol choice only matters when you set up a connection manually.
Which Protocol Should You Use?
The protocols at a glance
| Protocol | What it is | What the network sees | Strongest at | Pick it manually when |
|---|---|---|---|---|
| VLESS Reality | Stealth protocol over TCP 443 | An ordinary HTTPS session to a real website | Getting through firewalls and deep packet inspection | You are on a censored or filtered network, using V2Box or Hiddify |
| Hysteria2 | QUIC-based stealth protocol | Traffic that resembles HTTP/3 | Lossy, congested, or throttled networks | Your connection is slow or unstable, using V2Box or Hiddify |
| IKEv2 | VPN protocol built into every major OS | Standard IPsec VPN traffic | Instant reconnects when you switch networks | You want a native setup with no extra software |
| OpenVPN | Veteran open-source VPN protocol | Standard OpenVPN traffic, UDP or TCP | Broad compatibility, including routers | Your device or router only supports OpenVPN |
VLESS Reality
VLESS Reality is our primary stealth protocol. The connection presents itself as an ordinary HTTPS session to a real site, runs over TCP port 443, and survives active probing. Firewalls that fingerprint and block VPN traffic see nothing unusual.
The easiest way to use it is the VPNBaron app for Windows, macOS, iOS, or Android. Pathfinder picks it when it is the best route. For third-party clients, add your stealth subscription to V2Box or Hiddify.
Hysteria2
Hysteria2 runs on QUIC, so its traffic resembles HTTP/3. It excels where connections are poor: packet loss, congestion, and ISP throttling. On networks where TCP-based protocols crawl, Hysteria2 keeps speeds up.
Setup paths are the same as VLESS Reality: use the VPNBaron app, or load your stealth subscription into V2Box or Hiddify.
IKEv2
IKEv2 is natively supported by Windows, macOS, iOS, and Android, so it needs no extra software. It reconnects instantly when you move between Wi-Fi and mobile data, which makes it a solid manual choice for phones and laptops on unrestricted networks.
Setup guides: Windows, macOS, iOS, Android. Your credentials and the server list are on the Servers page of your dashboard (login required).
OpenVPN
OpenVPN remains available as a manual option. The app does not use it, but it is fully supported and works almost everywhere, including routers. Download .ovpn config files from the dashboard Servers page. Each server offers a UDP config (faster) and a TCP config (more reliable on strict or unstable networks).
Setup guides: Windows, macOS, iOS, Android, TP-Link routers.
Retired protocols
Trojan was retired and superseded by VLESS Reality, which camouflages better and holds up under active probing.