A chameleon protocol. AmneziaWG 2.0 against DPI

AmneziaWG — an obfuscated WireGuard from Russian developers. Mimicry under DNS, QUIC and SIP.

A chameleon protocol. AmneziaWG 2.0 against DPI

History

Since about 2022 (and in Russia especially after 2024) it became clear: the good old WireGuard head-on no longer works. DPI systems learned to identify it by the handshake packet size alone. Developers from the Russian AmneziaVPN team took WireGuard and said: "Let's add a bit of schizophrenia to it."

That's how AmneziaWG was born. At first it was simply an obfuscated WireGuard. But in 2026 version 2.0 came out, which they called a fundamental rethinking of the approach.

Advantages

AmneziaWG learned to pretend. Its main feature is mimicry. If you enable the disguise settings, your traffic stops looking like a VPN. To a censor it looks like an ordinary DNS query, a Zoom video call (SIP), or a QUIC session (HTTP/3).

How does it work? Before starting encryption, the protocol sends noisy packets (Junk train) into the channel and randomizes headers. The DPI goes crazy because it can't learn the "portrait" of your connection. At the same time, the speed remains essentially native.

Disadvantages

You pay for paranoia with setup complexity. In regular WireGuard you simply generate keys, but here you have to play with signatures (CPS), tune the randomization parameters S1-S4 so you don't break compatibility. Plus it's still primarily a self-hosted story.

Summary

AmneziaWG 2.0 is the "Invisibility Cloak" for the world of internet censorship. It's the best choice if you live in a country that tightens the screws on the internet and regular WireGuard no longer works.

Ready to try it?

Join thousands of RUSVPN users