VPN bypassing Firewalls (Wireguard DPI)
from parameter2938@lemmy.today to selfhosted@lemmy.world on 17 Nov 16:11
https://lemmy.today/post/19232604

Hey everyone, I was wondering about possible solutions to reach my home network when travelling. At the moment, I have a Wireguard VPN to my home router running OpenWRT. However, this is increasingly useless as Wireguard connections (even on port 80 and 443) are being blocked by hotels etc. (presumable DPI?). I have read about Shadowsock being a possible solution but struggled setting it up on my OpenWRT router.

Are there any other options? Preferably those that can run on an OpenWRT router, or on a server at home.

Any help is much appreciated.

#selfhosted

threaded - newest

cron@feddit.org on 17 Nov 16:19 next collapse

Maybe try some TLS-based VPN? This should work almost anywhere, because it looks like a standard HTTPS connection.

Wireguard - even on port 443 - is special as it uses UDP protocol and not the more widely used TCP protocol.

just_another_person@lemmy.world on 17 Nov 16:32 next collapse

The issue is more likely to be your port selection and UDP being discarded on networks with captive portals that generally only allow certain ports and traffic. Try using some other common UDP service ports like 53/DNS if not already in use, or maybe 5060/SIP, or even other common VPN ports.

Unless they’re running L7 hardware in the hotels, I doubt they’re doing any kind of packet inspection.

parameter2938@lemmy.today on 19 Nov 06:49 collapse

It works with port 5060, thank you so much!

just_another_person@lemmy.world on 19 Nov 07:15 collapse

👍

rearview@lemmy.zip on 17 Nov 16:34 next collapse

Tailscale/Headscale + DERP may work as they relay packets through a typical HTTP server. Just make sure your router has some space to download the binary - for MIPS they’re like ~60MB or something iirc.

ThorrJo@lemmy.sdf.org on 17 Nov 18:53 next collapse

Not sure if Wireguard over obfs4proxy is doable easily on OpenWRT yet, but it may be an option

ExcessShiv@lemmy.dbzer0.com on 17 Nov 19:51 next collapse

I recently had massive issues reaching my home network from hotel WiFi. I couldn’t even connect my regular VPN on their WiFi, I tried a bunch of stuff with different ports, TCP/UDP, different protocols, nothing seemed to work even for my proton VPN.

I managed to get mullvad running though, then I could connect with tailscale (with mullvad VPN still running) and then disable mullvad after tailscale connected. Tailscale then didn’t drop the connection.

Weird work around, but it was consistent.

MTK@lemmy.world on 17 Nov 20:02 next collapse

Double VPN, first one is orbot/psiphon and then your VPN.

Easy on Linux, not so easy on other platforms, especially non-rooted android or iphones

Marzanna@yiffit.net on 19 Nov 08:17 collapse

You can try AmneziaWG, a fork of Wireguard for censorship circumvention.