Short answer: use NordLynx. It's NordVPN's default protocol, it's the fastest of the three, and it's what you want for streaming Netflix US, Crave, or CBC Gem without buffering. You only need to switch away from it in one specific situation, covered below.
The Three Protocols NordVPN Offers
NordVPN's apps let you choose between:
- NordLynx — NordVPN's own implementation built on WireGuard. Default on every platform.
- OpenVPN (UDP/TCP) — the older, more configurable protocol. Slower than NordLynx but more flexible.
- IKEv2/IPsec — fast at re-establishing a dropped connection, mainly useful on mobile.
You can switch between them in the NordVPN app under Settings → Connection → VPN Protocol (desktop and mobile menus are laid out slightly differently, but the setting lives in the same place).
Why NordLynx Wins for Streaming
Streaming a 4K Netflix or Crave stream needs sustained throughput, not just a fast initial connection. NordLynx is built on WireGuard's lean codebase, which means less encryption overhead per packet than OpenVPN — in practice that translates to fewer dropped frames and less re-buffering on a long stream.
It also reconnects faster if your Wi-Fi blips, which matters more than people expect: a mid-episode VPN drop on OpenVPN can take several seconds to recover, long enough for a stream to stall or kick you back to a login screen.
For everyday streaming from a Canadian ISP connection — whether you're unblocking Netflix US or just want an encrypted connection while watching Crave — NordLynx is the right default and you shouldn't need to touch the setting.
When to Switch to OpenVPN Instead
There's one real reason to move off NordLynx: if a streaming service is actively detecting and blocking your VPN connection.
NordVPN's obfuscated servers — designed to disguise VPN traffic as regular HTTPS traffic — currently run on OpenVPN, not NordLynx. If you're getting a proxy-detection error on a service that normally works fine, switching to OpenVPN and connecting to an obfuscated server is the troubleshooting step worth trying before you give up on that server. See our guide on what still works with Netflix and VPNs for the full troubleshooting sequence.
Outside of that specific case, OpenVPN's extra overhead isn't buying you anything for streaming — it's the fallback option, not the daily driver.
What About IKEv2?
IKEv2/IPsec is a reasonable choice on mobile because it handles switching between Wi-Fi and cellular without dropping the tunnel. If you're streaming on a phone while moving between networks — say, watching something on the train — it's worth trying. For anything on a fixed connection (laptop, smart TV, router-level VPN), NordLynx is still faster and there's no reason to use IKEv2 instead.
Quick Reference
| Protocol | Best for | Speed | Notes | |---|---|---|---| | NordLynx | Everyday streaming, default use | Fastest | WireGuard-based, use this unless you have a reason not to | | OpenVPN | Bypassing VPN detection | Slower | Required for NordVPN's obfuscated servers | | IKEv2/IPsec | Mobile streaming on the move | Fast | Best at surviving network switches |
Bottom Line
Leave NordVPN on NordLynx for streaming Netflix US, Crave, or CBC Gem from Canada — it's faster and more stable than the alternatives. Only switch to OpenVPN with an obfuscated server if a specific streaming service is blocking your connection outright.
For the full picture on pricing, server count, and how NordVPN compares to the rest of the field, see our NordVPN review.