nearly any vpn should work

all recommendations you'll get will be personal preference / bias (including mine)

personally I use https://safing.io/spn/ (their fancy name for what basically is a multihop VPN), cause they have a nice gui (called portmaster, free and open source) and you can turn it on/off, set country and add custom domain rules - all on an app by app basis.

If you are referring to a self-contained end user app then I'd recommend Mullvad. If you are referring to a protocol and want to DIY a vpn tunnel to your VPS, then Wireguard. Mullvad uses Wireguard.

Any one supporting WireGuard.

Wireguard

is there a particular reason why the distribution matters? whatever vpn you end up using should work so long as it works on open standards.

I use both Nym and Proton on Linux (and all my computers)

Service or protocol?

You can probably use any protocol although I would caution against openvpn.

Idk of any service that doesn’t generate configs or whatever that you can easily use in arch.

There are many different reasons to use a vpn and they will all recommend different systems. Piracy benefits from port forwarding. Dodging the school/work porno filter requires many rotating endpoints. Pretending to be important enough for state level surveillance requires trust and understanding.

You can’t get everything in one service because they’re mutually exclusive. Port forwarding services roll over for cops, cheap content enabling VPNs are all owned by Israeli intelligence cutout kape technologies, schizo privacy/anonymity ones don’t do port forwarding.

The question you need to answer to get a useful response is: what are you planning on doing?

It's cheaper and better to just pay for a VPS and spin up a wireguard server and use that to connect to. Choose a server in a region that supports what you need and away you go.