Two providers, one advertising 6,000 servers and one advertising 600, and the larger number feels like more of something. It is more of an undefined unit. Before the count can inform a choice, three conditions have to be settled: whether any of those endpoints serves the region and protocol you need, whether capacity holds during your working hours, and who operates the infrastructure and what it records.

Three conditions that decide the answer

The first is fit. A directory entry is useful only if it accepts your client, offers the protocol you require and lands in a region that improves the path to your actual destination. An inventory of a thousand endpoints in regions you never use is a smaller number than it appears.

The second is capacity at the moment you need it, which is not the same as capacity in aggregate. A large fleet can still be saturated on the two exits nearest you during the hours you work, and an idle fleet on the other side of the world does not help.

The third is ownership and retention. Infrastructure scale says nothing about who operates the service, what it logs, or whether the client is maintained. That is a policy question with documentary evidence, not a number on a landing page.

All three have to hold for the count to mean anything, and each of them can be checked separately. That is the useful part: the decision does not require trusting the headline at all. You can verify each condition on your own terms. Anyone who documents the three answers has done more work than the brochure did.

What the headline number is counting

The four units in the table above are routinely mixed in one comparison, and the largest figures usually come from whichever unit is easiest to inflate. Container instances are cheap to create and can share a single physical uplink, so a count of them describes configurability rather than diversity.

What the number countsWhat it tells youWhat it cannot tell you
Countries or regionsHow many jurisdictions have at least one entryHow many independent machines exist
Physical hostsRoughly how much hardware is deployedWhether any of it is near your destination
Container instancesHow many configurable endpoints can be issuedWhether they share one upstream path
Downloadable profilesHow many configuration files are offeredWhether the endpoints behind them still work

That is not automatically dishonest. A provider issuing a fresh instance per session is describing something real about how it works, and the number is a fair description of that mechanism. The error is comparing it with another provider's count of countries as though the two numbers measured the same thing, which they do not.

There is also a maintenance dimension that no static count captures. Listings age, and an endpoint that appears available can still refuse the profile you were given. A directory is a set of candidates to verify, not an inventory of working options. Treat a listing as a claim rather than as a fact. Verifying two entries costs ten minutes and settles the question.

Test the path you actually need

Pick two candidate endpoints in the region you care about and measure the path onward from the exit to the service you use. Latency to the VPN gateway is the number providers like to quote, and it is the least interesting one, because it excludes the part of the journey that usually causes the problem.

mtr -rwc 20 203.0.113.9
curl -o /dev/null -s -w '%{time_connect} %{time_starttransfer}
' https://example.net/

The trace reports where delay appears along the whole route, hop by hop, which distinguishes a distant exit from a congested one. The curl timing separates connection setup from the first byte of a response, so a slow handshake and a slow server do not get conflated.

Run the comparison at the times you actually work, and write down the endpoint, the exit address and the destination you tested. A result without those three details cannot be reproduced a week later, including by you.

Keep one working alternative configured with its exact address and protocol. The value of a fallback is measured on the day the primary stops working, and that is the day nobody wants to be reading a directory.

Shortlist, then decide on evidence

Reduce the comparison to three or four providers that pass the fit test, then judge them on the checks you can actually run. A shortlist forces the questions that a longer list lets you avoid, and it makes the trade-offs explicit instead of averaging them into a preference.

Record the evidence in a form someone else could audit: the region and protocol you required, the endpoints you tested, the times of day, and what the traces showed. Add the policy facts you verified, with dates, because retention statements change and an undated citation is not evidence.

Then accept the conclusion the evidence supports, which is usually narrower than a winner. One provider may be better for your region at your hours, another better for a protocol you need for a specific client, and neither fact is captured by the size of a list.

The count is not useless; it is a coarse hint about investment. It becomes a quality claim only after someone defines the unit, verifies that the endpoints work, and shows that the specific path you need is better. Until then it belongs in the marketing column, not the decision column.

Amanqephe ahlobene