WireGuard is blocked by DPI in 10+ countries now. AmneziaWG 2.0 is a fork that makes the traffic look like random noise - DPI can’t tell it apart from normal UDP. Same crypto under the hood, negligible speed overhead.
I wrote an installer that handles the whole setup in one command on a clean Ubuntu/Debian VPS - kernel module, firewall, hardening, client configs with QR codes. Pure bash, no dependencies, runs on any $3/month box. MIT license.
Been running it from Russia where stock WireGuard stopped working mid-2025.
DPI?
Deep packet inspection. Looking for patterns in the actual headers and payload of packets. Computationally expensive.
It is not as expensive as it used to be.
Thanks to all replyers. My brain came up with dots per inch, which didn’t make any sense at all.
Deep Packet Inspection
Deep package insertion.
This baby’s built for deep penetration, not speed!
Wasn’t sure either, looked it up quickly…
In this context it’s probably referring to Deep Packet Inspection, some technique to determine traffic type, and then blocking specific (Wireguard and/or OVPN) traffic.