News for hackers. Stuff that matters.
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust by DANmode on Friday December 19, 2025 @08:00AM (#46325335)
Known Limitations

WireGuard is a protocol that, like all protocols, makes necessary trade-offs. This page summarizes known limitations due to these trade-offs.

Deep Packet Inspection

WireGuard does not focus on obfuscation. Obfuscation, rather, should happen at a layer above WireGuard, with WireGuard focused on providing solid crypto with a simple implementation. It is quite possible to plug in various forms of obfuscation, however.

tl;dr Read the docs.

Re:GotaTun -- Mullvad's WireGuard Implementation in Rust by mycall on Friday December 19, 2025 @09:11AM (#46326035)
Mullvad does exactly this.
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust by coppsilgold on Friday December 19, 2025 @01:43PM (#46329333)
WireGuard limitations hurt the attempt however.

For example, multi-hop betrays the actual exit node to your ISP (or MITM) due to the port used.

Re:GotaTun -- Mullvad's WireGuard Implementation in Rust by baobun on Friday December 19, 2025 @04:20PM (#46331079)
To clarify, this is refering to Mullvad multi-hop feature. Doing your own multihop setup doesn't have this issue, right?
Re:GotaTun -- Mullvad's WireGuard Implementation in Rust by coppsilgold on Friday December 19, 2025 @06:20PM (#46332135)
Correct. Note that the MTU will be further reduced and that WireGuard DIY multi-hop may be inferred.