VPN bypassing Firewalls (Wireguard DPI)

Submitted ⁨⁨5⁩ ⁨hours⁩ ago⁩ by ⁨parameter2938@lemmy.today⁩ to ⁨selfhosted@lemmy.world⁩

Hey everyone, I was wondering about possible solutions to reach my home network when travelling. At the moment, I have a Wireguard VPN to my home router running OpenWRT. However, this is increasingly useless as Wireguard connections (even on port 80 and 443) are being blocked by hotels etc. (presumable DPI?). I have read about Shadowsock being a possible solution but struggled setting it up on my OpenWRT router.

Are there any other options? Preferably those that can run on an OpenWRT router, or on a server at home.

Any help is much appreciated.

source

Comments

Sort:hotnew top

just_another_person@lemmy.world ⁨5⁩ ⁨hours⁩ ago
The issue is more likely to be your port selection and UDP being discarded on networks with captive portals that generally only allow certain ports and traffic. Try using some other common UDP service ports like 53/DNS if not already in use, or maybe 5060/SIP, or even other common VPN ports.

Unless they’re running L7 hardware in the hotels, I doubt they’re doing any kind of packet inspection.

source
MTK@lemmy.world ⁨1⁩ ⁨hour⁩ ago
Double VPN, first one is orbot/psiphon and then your VPN.

Easy on Linux, not so easy on other platforms, especially non-rooted android or iphones

source
ExcessShiv@lemmy.dbzer0.com ⁨1⁩ ⁨hour⁩ ago
I recently had massive issues reaching my home network from hotel WiFi. I couldn’t connect my regular VPN on their WiFi, I tried a bunch of stuff with different ports, different protocols, nothing seemed to work even for my proton VPN.

I managed to get mullvad running, then I could connect with tailscale (with mullvad VPN still running) and then disable mullvad after tailscale connected. Tailscale then didn’t drop the connection.

Weird work around, but it was consistent.

source
cron@feddit.org ⁨5⁩ ⁨hours⁩ ago
Maybe try some TLS-based VPN? This should work almost anywhere, because it looks like a standard HTTPS connection.

Wireguard - even on port 443 - is special as it uses UDP protocol and not the more widely used TCP protocol.

source
rearview@lemmy.zip ⁨5⁩ ⁨hours⁩ ago
Tailscale/Headscale + DERP may work as they relay packets through a typical HTTP server. Just make sure your router has some space to download the binary - for MIPS they’re like ~60MB or something iirc.

source
ThorrJo@lemmy.sdf.org ⁨2⁩ ⁨hours⁩ ago
Not sure if Wireguard over obfs4proxy is doable easily on OpenWRT yet, but it may be an option

source