Hacker News Reader

I know someone do use wireguard to bypass the GFW. It's not blocked at the moment. However, a concern is that the UDP-based protocol is not hard to detect.

View on HN

This HN comment might be worth a look: [0]

It details the steps to setup udptunnel to tunnel Wireguard traffic over TCP. Hope it helps someone!

[0] - https://news.ycombinator.com/item?id=17847008

Anyone have experience with making this work? I tried starting it on the server I have WireGuard running on and it fails to start because it also wants to bind to the UDP port WireGuard uses (even in server mode).

Additionally http://www.cs.columbia.edu/~lennox/udptunnel/ has a note saying:

UDPTunnel is designed to tunnel RTP-style traffic, in which applications send and receive UDP packets to and from the same port (or pair of ports). It does not support request/response-style traffic, in which a client request is sent from a transient port X to a well-known port Y, and the server's response is returned from port Y to port X.

Which from what I understand is exactly what WireGuard does.

Thanks. Would be nice to have an alternative to shadowsocks.

Reply on news.ycombinator.com