https://github.com/infinet/rs-wgobfs
WireGuard Obfuscation Command Line Tool
https://github.com/infinet/rs-wgobfs
Last synced: 5 months ago
JSON representation
WireGuard Obfuscation Command Line Tool
- Host: GitHub
- URL: https://github.com/infinet/rs-wgobfs
- Owner: infinet
- Created: 2026-01-06T01:11:58.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2026-01-11T01:52:16.000Z (5 months ago)
- Last Synced: 2026-01-11T04:18:18.901Z (5 months ago)
- Language: Rust
- Homepage:
- Size: 21.5 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
`rs-wgobfs` is a cross-platform WireGuard obfuscator written in Rust. It is
fully compatible with [xt_wgobfs](https://github.com/infinet/xt_wgobfs).
- `rs-wgobfs`: Cross-platform CLI tool. Runs on Windows, Mac, BSD, and pfSense.
iperf3 reaches 670 Mbits/sec in a Windows VM with 8th gen Intel CPU.
- `xt_wgobfs`: High-performance Linux kernel module. Works on Linux, including
embedded devices with very limited resources (e.g. routers).
## Building
Run `cargo build --release` from inside the `rs-wgobfs` directory.
## Usage
```
rs-wgobfs -h
USAGE:
rs-wgobfs [OPTIONS]
OPTIONS:
-h, --help Print help information
-l or --listen Listen address:port
-f or --forward Peer's address:port
-k or --key Shared secret (will be repeated or
truncated to 32 characters)
-m or --mode Mode, either obfs or unobfs
```
To obfuscate WG to a remote peer, first update the WG configuration, replace the
ip/hostname and port of the remote peer with `listen_ip:listen_port` of
`rs-wgobfs`. Then run:
```
rs-wgobfs -l listen_ip:listen_port -f wg_server:port -k mysecretkey -m obfs
```
To accept obfucated WG traffic from clients on a WG server:
```
rs-wgobfs -l listen_ip:listen_port -f wg_server:port -k mysecretkey -m unobfs
```