WireGuard with obfuscation support

Bruno Wolff III bruno at wolff.to
Mon Sep 27 10:21:57 UTC 2021


On Mon, Sep 27, 2021 at 14:36:28 +0500,
  Roman Mamedov <rm at romanrm.net> wrote:
>On Mon, 27 Sep 2021 04:14:35 -0500
>Bruno Wolff III <bruno at wolff.to> wrote:
>
>> This isn't a simple problem. The assumption is that someone is seeing
>> your network traffic and blocking it.
>
>The assumption is that there's an appliance at the ISP which has a DROP rule
>for UDP with 4 fixed bytes at a fixed offset. It has five hundreds other rules
>to process as well, so it can't spend "too much" time on specifically WG.
>
>> They are still going to see it  even if you disguise it.
>
>With obfuscation there would be UDP packets of random junk, and it would be a
>much harder job to come up with a rule to drop those without affecting
>anything else.

If your ISP is blocking your Wireguard traffic call them up and complain.


More information about the WireGuard mailing list