Wireguard

nearly any vpn should work

all recommendations you'll get will be personal preference / bias (including mine)

personally I use https://safing.io/spn/ (their fancy name for what basically is a multihop VPN), cause they have a nice gui (called portmaster, free and open source) and you can turn it on/off, set country and add custom domain rules - all on an app by app basis.

I use both Nym and Proton on Linux (and all my computers)

Can't tell which works best but here's my experience with Windscribe:
(+) there is a native Linux app
(+) it's open source
(+) they provide a pacman package
(-) only as download from their website
(+) they provide an online config generator for all supported protocols like Wireguard

Yep. Personally I've enjoyed PIA for years on my linux desktop, linux tablet, linux laptop, Linux VMs, raspberrypi, android phones

Any one supporting WireGuard.

Service or protocol?

You can probably use any protocol although I would caution against openvpn.

Idk of any service that doesn’t generate configs or whatever that you can easily use in arch.

There are many different reasons to use a vpn and they will all recommend different systems. Piracy benefits from port forwarding. Dodging the school/work porno filter requires many rotating endpoints. Pretending to be important enough for state level surveillance requires trust and understanding.

You can’t get everything in one service because they’re mutually exclusive. Port forwarding services roll over for cops, cheap content enabling VPNs are all owned by Israeli intelligence cutout kape technologies, schizo privacy/anonymity ones don’t do port forwarding.

The question you need to answer to get a useful response is: what are you planning on doing?

I am not going to fight you and the decisions you make are not my business.

If anyone reading this isn’t aware, pia is owned by kape technologies, a company that owns several vpn providers and was founded by members of the Israeli intelligence apparatus. That may make it more or less of a good choice depending on your goals.

Iirc they were proven under a supeona to have ram only servers, which isn't to say much, but that already makes them much better than most VPN providers out there

is there a particular reason why the distribution matters? whatever vpn you end up using should work so long as it works on open standards.

If you are referring to a self-contained end user app then I'd recommend Mullvad. If you are referring to a protocol and want to DIY a vpn tunnel to your VPS, then Wireguard. Mullvad uses Wireguard.

It's cheaper and better to just pay for a VPS and spin up a wireguard server and use that to connect to. Choose a server in a region that supports what you need and away you go.

I wasn't aware, thanks. I'll consider switching. They can spy on my torrents meanwhile :)

Yeah mulvad works really well.

PIA owner is Israeli company. Do not thrust them.