Unfortunately the recent popularity means that almost all DPI software recognize the wireguard handshake.
Unfortunately the recent popularity means that almost all DPI software recognize the wireguard handshake.
Unless you mean WireGuard over Shadowsocks UDP transport, but that is even less common.
(Disclaimer: I wrote the official Go port of Shadowsocks https://github.com/shadowsocks/go-shadowsocks2)
Sometimes a bad solution is better than no solution at all.
Tunneling WG over SS would be inefficient for obvious reasons. Maybe there should be a more lightweight solution.
Why should that matter? How does the DPI software get your keys? Isn't WireGuard data flow completely opaque to anyone or anything between endpoints?
If the DPI software blocks WireGuard packets, that's an entirely different discussion. It gets into the area of "technical solutions" to fight "administrative policy".
Yes, that's exactly the point. Sometimes that's the best course of action available to you. If the userspace implementation were to be deprecated that could pose difficulties.