Surfshark's Dausos: A Proprietary Bet on Consumer VPNs
In a VPN market crowded with providers and largely standardized protocols, Surfshark has made a bold move, introducing Dausos, a brand-new, proprietary protocol it hopes will redefine the consumer VPN experience. It’s an ambitious undertaking, given the industry's reliance on battle-tested open-source options like WireGuard and OpenVPN. But Surfshark sees an opportunity to deliver something purpose-built for the end user, rather than adapting enterprise-grade solutions.
The name Dausos, derived from the Lithuanian word for heaven, hints at the company's lofty aspirations for this protocol. The core premise is that most existing VPN protocols weren't designed from the ground up for consumer use, often leading to compromises in speed or efficiency. Surfshark aims to sidestep these by engineering Dausos specifically for what everyday users need.
Best VPN services 2026: Expert tested and recommended
Rethinking the Tunnel: Dedicated Paths and Advanced Encryption
The most significant architectural shift with Dausos lies in how it handles user traffic. Traditionally, multiple VPN users might share a single traffic tunnel, meaning one user's heavy load could impact another's speed or introduce potential, albeit low, risks of traffic contamination. Dausos carves out a separate, dedicated traffic tunnel for each individual user.
Karolis Kačiulis, a Leading System Engineer at Surfshark, elaborated on this distinction: "When users share a tunnel, one user's traffic load can interfere with another's, meaning your packets get handled slower because the server is busy processing other users' packets. With Dausos, each user gets a dedicated tunnel, so that problem goes away." This architectural choice is meant to deliver a cleaner, more streamlined experience, and theoretically, better performance isolation.
Beyond traffic management, Dausos also upgrades its cryptographic foundation. It employs AEGIS-256X2 for encryption, moving away from the more widely adopted AES-GCM. Surfshark positions AEGIS-256X2 as a security enhancement, even hinting at its potential as a post-quantum solution. While the immediate threat of quantum computing breaking current encryption standards isn't imminent for most consumer use cases, baking in forward-looking security like this suggests a long-term vision for protecting user data.
10+ VPN tricks and tips I recommend to everyone (whether for personal or business use)
Under the Microscope: Audits and Early Stumbles
Introducing a new, proprietary protocol, especially one with novel encryption, inherently carries risks. The security community typically prefers open-source protocols, which benefit from extensive peer review and transparent vetting. To address this, Surfshark commissioned independent auditor Cure53 to assess Dausos.
The audit's findings were encouraging, with the assessment noting: "With no findings rated at Critical or High severity within the actual Dausos protocol itself, the audit results reflect a stable and resilient platform. The Surfshark team demonstrated a significant commitment to security by remediating the majority of the findings immediately following the testing phase." This external validation is a critical step in building trust around new, proprietary security technologies.
That said, Dausos wasn't without its initial hiccups. Upon launch, some users reported issues with the protocol's performance on residential connections. Surfshark, to their credit, quickly developed and deployed a fix, suggesting responsiveness to real-world feedback during its early rollout. This agility is vital when introducing complex network innovations.
Real-World Performance: A Mixed Bag (For Now)
Surfshark claims Dausos could offer up to 30% faster speeds than other protocols, including WireGuard, which is often the default for many providers. Naturally, real-world performance is the ultimate test, and my own observations offered a slightly more nuanced picture.
In testing against my unprotected connection and WireGuard, Dausos generally performed well for internet browsing and streaming on services like Netflix and YouTube, indicating the initial teething issues are likely resolved. However, a closer look at the numbers shows it isn't a clean sweep.
With WireGuard enabled, download speeds saw a 35.54% reduction, while upload speeds dropped by 6.30%. Dausos, by comparison, resulted in a 38.25% decrease in download speeds but a more modest 4.88% drop in upload speeds. What this tells us is that WireGuard still held an edge in download speed retention during these tests, while Dausos slightly outperformed it on uploads. It's a reminder that performance can be highly variable, influenced by numerous connection and environmental factors, so individual experiences will differ.
Surfshark VPN review: One of our favorite budget VPNs with unlimited connections
Looking Ahead: The Proprietary Question and Market Implications
Dausos is currently in beta and exclusively available on macOS for Surfshark subscribers who download the app directly from the Apple App Store. The company plans to extend availability to other platforms in the future. As a free addition for existing users, it’s an easy proposition to experiment with.
The larger question hovering over Dausos, as with any proprietary protocol in the security space, is whether it will ever become open source. The industry, particularly the security research community, often views open-source code as a prerequisite for true trust and widespread adoption, as it allows for collaborative vetting and transparency. When asked about this, Kačiulis confirmed it's not possible during this early phase, but acknowledged, "We see the benefits of it and it's something we're actively discussing." He added, "We'll keep you updated as we continue to evaluate our open-source strategy."
This dialogue is critical. While Surfshark has taken a meaningful step with a third-party audit, the long-term credibility and widespread acceptance of Dausos would be significantly bolstered by eventually opening its source code. For now, Dausos stands as an interesting statement from Surfshark: a commitment to differentiate through foundational engineering, pushing the boundaries of what a consumer VPN protocol can be. It’s a challenge to the status quo, and the industry will be watching closely to see if their bet pays off.