Mullvad, because it has a good interface for port forwarding, and I kinda like the fact that it supports wireguard. It's also fast and reliable (but so are many of the others), and apparently has good privacy. I've previously used AirVPN, which was great except for not having any servers near me, and ExpressVPN, which was great except for not having such a good interface for port forwarding (and also it's the most ex…
Read this on Wireguard: https://restoreprivacy.com/wireguard/ Be aware.
Wireguard also does not do any of the logging claimed by that article by default. I know this because I maintain Wireguard VPN instances on baremetal and public cloud. This strikes me as a misunderstanding of what Jason wrote on the mailing list about Blind Operator Mode[3].
I stopped reading that article after I saw these two (glaring) inaccuracies. Either someone has a vendetta against Wireguard or they seriously misunderstand the protocol's security and default behavior. ________________
1. https://www.wireguard.com/formal-verification/
2. https://eprint.iacr.org/2018/080.pdf
3. https://lists.zx2c4.com/pipermail/wireguard/2017-November/00...