Re:GotaTun -- Mullvad's WireGuard Implementation in Rust
by mycall on Friday December 19, 2025 @09:11AM
(#46326035)
Mullvad does exactly this.
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust
by coppsilgold on Friday December 19, 2025 @01:43PM
(#46329333)
WireGuard limitations hurt the attempt however.
For example, multi-hop betrays the actual exit node to your ISP (or MITM) due to the port used.
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust
by baobun on Friday December 19, 2025 @04:20PM
(#46331079)
To clarify, this is refering to Mullvad multi-hop feature. Doing your own multihop setup doesn't have this issue, right?
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust
by coppsilgold on Friday December 19, 2025 @06:20PM
(#46332135)
Correct. Note that the MTU will be further reduced and that WireGuard DIY multi-hop may be inferred.
WireGuard is a protocol that, like all protocols, makes necessary trade-offs. This page summarizes known limitations due to these trade-offs.
Deep Packet Inspection
WireGuard does not focus on obfuscation. Obfuscation, rather, should happen at a layer above WireGuard, with WireGuard focused on providing solid crypto with a simple implementation. It is quite possible to plug in various forms of obfuscation, however.
tl;dr Read the docs.