Hacker News Reader

Probably not. Wireguard doesn’t aim for VPN DPI bypass. It might work for now just because it’s new but it’s not difficult to dpi.

View on HN

What are the solutions for DPI bypass?

Will this be an eventual goal?

I fail to find the post on the mailing list right now, but iirc the author prefers WG to be the secure part of the equation, with use cases like Dubai/China relying on other tools to mix up/obfuscate the data hitting the wire.

I do hope the author takes this up too. They're extremely talented. Could make a big change in firewall systems.

Iran sometimes does data per endpoint analysis and is able to block any VPNs since they're all single endpoint VPNs. If we were able to split the data to, say a few hundred unique ips it would be extremely difficult to block it.

Reply on news.ycombinator.com