Definition
Obfuscated servers are VPN servers configured to disguise their traffic. Connecting to one runs the VPN protocol inside an obfuscation layer (Stunnel, XOR, obfs4, or proprietary equivalents), making the traffic appear to be ordinary HTTPS or random data rather than identifiable VPN traffic. Providers maintain separate obfuscated server pools because the obfuscation layer adds overhead and is not needed for users on open networks.
Performance Cost
Obfuscation costs measurable performance. The extra encapsulation increases packet overhead, the processing imposes additional CPU load, and obfuscated servers tend to be in fewer geographic locations. Expect noticeably lower throughput than a direct VPN connection on the same hardware; 10 to 30 percent is a common rough estimate. For users in restrictive countries, this is the cost of having a working VPN at all; for everyone else, it is a needless overhead.
When to Use
Use obfuscated servers when ordinary VPN connections fail or are throttled — common in China, Iran, Russia, parts of the Middle East, on certain corporate or university networks, and on hotel Wi-Fi systems that monetize blocking. Do not use them by default elsewhere; pick a regular server in your preferred location for best performance.
In Practice
Turn obfuscation on only when you need it, such as on a hotel or campus network that blocks VPNs, or when travelling to a country that filters VPN traffic. Check the local law first: in some countries using a VPN to get around blocks is itself restricted. On ordinary home networks in the EU, a standard WireGuard connection is faster.