Enable TLS tunnel to bypass UDP blockings in restricted regions#91
Closed
amirhmoradi wants to merge 98 commits into
Closed
Enable TLS tunnel to bypass UDP blockings in restricted regions#91amirhmoradi wants to merge 98 commits into
amirhmoradi wants to merge 98 commits into
Conversation
Main patch
fixed Advanced Install
hotfix
Added details about unsafe inline CSS and public keys to the Traffic Shaping bug fixes entry.
Added details for sol-beta-v2.5.3 release including theme updates, logo update, UI bug fixes, and Tor Protocol Badge.
Added warning for beta version and updated theme, logo, and UI.
Added details for flat-bridge-v0.0.1 release including Dockerfile updates, security enhancements, and frontend improvements.
Added release notes for versions v0.0.2, v0.0.3, and v1.5.0.
Implements optional TLS tunneling using udptlspipe to wrap WireGuard UDP traffic in TLS encryption, helping bypass DPI and UDP restrictions in censored environments. Key Features: - Optional TLS tunnel via udptlspipe container - Docker profile-based activation (backward compatible) - Interactive configuration in Advanced installation mode - Password-protected TLS connections - Configurable TLS port (default: 443) - Comprehensive client setup documentation Changes: - docker-compose.yml: Add udptlspipe service with profile support - install.sh: Add TLS environment variables and profile handling - WG-Dash-ENV-setup.sh: Add TLS configuration functions with interactive prompts for enabling, port, and password setup - README.md: Add TLS feature announcement and documentation links - Docs/TLS-TUNNEL-SETUP.md: Complete setup guide covering server and client configuration for multiple platforms Implementation Details: - Uses ghcr.io/ameshkov/udptlspipe:latest Docker image - Deployed at 10.2.0.5 in private_network - Only starts when WGD_TLS_ENABLED=true - Forwards to first WireGuard port (WGD_PORT_RANGE_STARTPORT) - Environment variables saved to .env file - Non-invasive design preserving existing UDP functionality Client Support: - Docker-based setup (recommended) - Standalone binary installation - Android via Termux - MTU=1280 requirement documented - Server IP exclusion from tunnel explained Addresses issue NOXCIS#63: UDP traffic blocking in restrictive regions Co-authored-by: amirhmoradi
Owner
|
@amirhmoradi Cool I'll review and take a look this weekend. |
amirhmoradi
force-pushed
the
claude/issue-63-wiregate-011CUojiMSEFd7Dk6nbaCrhn
branch
from
0a5cb61 to
3ce7f19
Compare
Author
|
Closing in favor of #101 which is correctly based on bug-hunting. |
amirhmoradi
deleted the
claude/issue-63-wiregate-011CUojiMSEFd7Dk6nbaCrhn
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The TLS tunnel feature allows WireGuard traffic to be wrapped in TLS encryption, helping bypass UDP blockings and Deep Packet Inspection (DPI) in restrictive network environments. This is particularly useful in regions where UDP traffic is blocked or heavily throttled.