IKEv2 is a VPN tunnel protocol optimised for mobile devices — it survives network switches (Wi-Fi to cellular) without dropping.
Explanation
IKEv2 (Internet Key Exchange version 2) is the default VPN protocol on iOS and macOS built-in VPN clients because it handles network transitions gracefully — switch from Wi-Fi to cellular and the tunnel stays up without reconnection. That mobility resilience is its main selling point over OpenVPN. Cryptographically it is modern and secure. Downsides: less firewall-traversal-friendly than OpenVPN-over-TCP-443 (uses UDP 500 and 4500, both easy to block), and less obfuscated than WireGuard-with-plugins in restrictive-network scenarios. Corporate VPNs and iOS-heavy environments favour IKEv2; consumer VPNs mostly moved to WireGuard.
Related terms