Wireguard does not work in Iran

[David Fifield]

On Wed, Sep 28, 2022 at 09:32:04AM +0000, Mehdi Haghgoo wrote:
> It seems that Wireguard does not work at all in Iran.
> I used to use it with nmcli on Linux, but recently it just does not work, even with ADSL Internet (Mobile internet is mainly shut down).
> 
> I suspect it is not because UDP is completely blocked, because I see some other VPNs are working with UDP. Could the co
> 
> Are there any suggestions to make Wireguard work under recent harsh Internet crackdowns?

Some people are reporting success with two-hop proxies, since not all
networks in Iran are subject to the same blocking rules. The first hop
is to another host in Iran that is less censored; the second hop crosses
the border. I haven't seen a report of someone doing this with
onobfuscated WireGuard specifically, but it may work. The second link in
the list has a kcptun component, which is UDP.

tutorial for multi-hop shadowsocks servers
https://github.com/net4people/bbs/issues/126

Tutorial: setting up a Tor bridge for Iran
https://github.com/net4people/bbs/issues/127

Two-layered access
https://forum.torproject.net/t/two-layered-access/4783

In terms of obfuscation for the WireGuard protocol, here are some
references:

Iptables WireGuard obfuscation extension
https://lists.zx2c4.com/pipermail/wireguard/2022-September/007822.html

swgp-go (userspace obfuscation proxy)
https://lists.zx2c4.com/pipermail/wireguard/2022-June/007638.html

WireGuard with obfuscation support
https://lists.zx2c4.com/pipermail/wireguard/2021-September/007142.html
https://github.com/net4people/bbs/issues/88

WireGuard obfuscation using shadowsocks
https://lists.zx2c4.com/pipermail/wireguard/2019-January/003809.html