AmneziaWG — WireGuard with obfuscation

What is AmneziaWG

AmneziaWG is a WireGuard fork by the AmneziaVPN team with added junk obfuscation: random handshake parameters (Jc, Jmin, Jmax, S1, S2, H1-H4) make packets indistinguishable from random traffic. This allows it to work in networks where regular WireGuard is blocked by filters.

Difference from WireGuard

Regular WireGuard is blocked in some networks — handshake packets have a characteristic byte signature that inspection systems detect. AmneziaWG adds randomization:

• Jc/Jmin/Jmax — count and size of junk packets before handshake.
• S1, S2 — padding size in main handshake packets.
• H1-H4 — overridden magic numbers replacing standard WireGuard headers.

Each server uses unique obfuscation parameters — blocking one does not help block the others.

Benefits

• WireGuard speed. Retains high performance of WireGuard — typically 2-3x faster than OpenVPN.
• Obfuscation. Works in networks where regular WG is dropped at handshake.
• Low battery drain. WireGuard-class — minimal CPU overhead, unlike OpenVPN.
• Multi-direction routing. Available chains with exit through multiple regions.

How to set up

1. Order access on the order page and select AmneziaWG protocol.
2. Install the official AmneziaVPN client from amnezia.org/downloads for your OS.
3. In /profile download the .conf configuration file or scan the QR code.
4. In AmneziaVPN → "Import configuration" → select .conf or QR → connect.

FAQ

Does regular WireGuard client work?
No, you need AmneziaVPN — it understands the junk obfuscation parameters.

What is the difference vs VLESS?
AmneziaWG is UDP-based, lower latency. VLESS is TCP, better disguised as HTTPS. We recommend trying both and picking whichever is more stable for your network.

Can it be used on a router?
Not yet — support for firmware like OpenWRT is in development. Currently only works on devices with AmneziaVPN.