On Mon, Jan 9, 2017 at 9:46 AM, Ameretat Reith <ameretat.re...@gmail.com> wrote: > Another use case would be circumventing some crazy state backed firewalls > that drop or throttle -mostly UDP- connections having high bandwidths. If > peer is being used as gateway and nameserver resolver, it can be used to > rotate server IPs too; yet another method to bypass kind of blockages.
That's another neat use case indeed. Baptiste's auto RTT-sensing idea would automatically figure out which IPs the firewall has throttled. (I suspect, however, that WireGuard isn't designed long term to deal with state sponsored firewalls and such; it's fingerprintable, as discussed earlier on the mailing list. Good approaches to building "unblockable VPNs" probably include something like symmetric crypto only, so that there's no protocol or handshake, with large random nonces (XChaPoly), forming messages that are indistinguishable from random, which are then massaged into resembling valid gzip'd data, and then placed below a valid HTTP header on port 80... or something wild like this.) _______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard