53
How do you mask Wireguard traffic?
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 Oct 2023
53 points (96.5% liked)
Selfhosted
40199 readers
581 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 1 year ago
MODERATORS
I have heard of shadowsocks for this purpose. I have not tried it myself but I recall having read it being used to hide VPN traffic behind the great firewall. A brief intro to it here:
https://errande.com/obfuscate-wireguard/
Thank you. It's between this and SoftEther now
Keep in mind there's another very easy method to mess with wg traffic: breaking the connection once every 30 seconds or so. This won't affect the vast majority of real HTTPS connections but will ruin long lived connections like ssh or streaming.
Hi, is there a point to doing this? My ISP/any advanced DPI will still know that I'm using Wireguard
They are talking about how whoever or whatever you are trying to get around can still mess with your wg tunnels even if you are masking them as https
How can someone else mess with the timeout of my wg tunnel if I mask them as HTTPS traffic?
They can break the session every 30 seconds, which would be fine for a normal web session but mess with your wg tunnel
Would breaking a TCP session every 30 seconds be OK for something like video streaming/content browsing?
I wonder if I can automate the breaking and forming of session on clients. Hopefully Android has something that will let me do this, I'm sure I can figure something out on Linux