In 2024, VPN blocking in Russia went mainstream. WireGuard — one of the fastest, most modern protocols out there — was among the first to get caught in the crackdown. That's when the Amnezia VPN team released a modified version of WireGuard with traffic obfuscation baked in. They called it AmneziaWG.
If you're setting up a VPN for use in Russia, Iran, or China, this protocol is probably your best bet. Here's why.
What AmneziaWG actually is
AmneziaWG is a WireGuard fork with traffic obfuscation layered on top. Under the hood, it uses the exact same cryptography as the original — ChaCha20, Poly1305, Curve25519. The difference is what the traffic looks like from the outside.
Standard WireGuard sends packets with a fixed, predictable header structure. Deep packet inspection systems — in Russia, that's the TSPU — can spot these signatures easily and block the connection outright.
AmneziaWG disguises that traffic to look like random noise. DPI can't confidently tag it as a VPN anymore.
AmneziaWG is cryptographically identical to WireGuard — speed and reliability stay nearly the same. Think of it less as "WireGuard, but slower and safer" and more as "WireGuard wearing an invisibility cloak."
How AmneziaWG differs from WireGuard
The technical differences boil down to a handful of obfuscation parameters layered on top of a standard config:
- Jc, Jmin, Jmax — the number and size of "junk" packets sent before the handshake
- S1, S2 — the amount of random padding added to handshake packets
- H1, H2, H3, H4 — custom header constants that replace WireGuard's standard values
Without these parameters, an AmneziaWG packet looks just like WireGuard and gets blocked the same way. With them, it reads as unidentified traffic.
For the end user, the difference is barely noticeable: install the app, import the config, connect. Everything else happens at the protocol level.
When to use AmneziaWG
You're in Russia
The TSPU actively blocks WireGuard across most ISPs. A connection might work for a while, then suddenly drop, then come back — that's DPI filtering in action. AmneziaWG holds up far more reliably in this environment.
You're in Iran or China
DPI is even more aggressive in these countries. WireGuard barely functions, and OpenVPN gets blocked almost instantly. AmneziaWG is one of the few protocols that still gets through.
You're in Turkey or another country with intermittent blocking
In Turkey, VPN blocking comes in waves — around political events, elections, protests. AmneziaWG tends to survive those waves better than plain WireGuard.
When plain WireGuard is enough
You're outside censorship-heavy countries
If you're in Europe, the US, Japan, or similar places, you don't need obfuscation. WireGuard is faster (slightly less packet-processing overhead) and simpler to set up. No need to overcomplicate things.
You need maximum speed
The speed gap between WireGuard and AmneziaWG is small, but it exists. On weaker hardware — older routers, budget phones — it can be noticeable. If you don't need obfuscation, stick with WireGuard.
You're running a self-hosted VPN with no censorship to worry about
If you're connecting to your own server inside a country with no VPN restrictions, AmneziaWG is overkill. WireGuard is simpler to debug and maintain.
Compatibility
AmneziaWG runs on all the major platforms:
- iOS/iPadOS — AmneziaWG on the App Store
- Android — AmneziaWG on Google Play
- Windows, macOS, Linux — official clients at amnezia.org
- Routers — supported via Amnezia Connect (Keenetic, some OpenWrt builds)
Official WireGuard clients don't support AmneziaWG — you need the dedicated AmneziaWG app. That's the main downside: if you're used to Jason Donenfeld's original WireGuard client, you'll need to get used to a new interface.
Performance
In tests on typical hardware, the gap between WireGuard and AmneziaWG comes out to:
- Throughput: -3-5% (barely noticeable)
- Latency: +1-3 ms (within margin of error)
- CPU load: +5-8% (negligible on mobile devices)
On faster connections (1 Gbit/s and above), the gap can become more noticeable — obfuscation adds extra work for the CPU.
If WireGuard feels unstable on your network but you'd rather not switch to AmneziaWG yet, try changing the port to 53 or 443 first. That sometimes fixes it. If it doesn't, AmneziaWG is the more reliable fix.
Security
Cryptographically, AmneziaWG is identical to WireGuard — same algorithms, same key exchange scheme, same pre-shared key model.
Obfuscation adds privacy, not security. If WireGuard's crypto is ever broken, AmneziaWG breaks right along with it. If you trust WireGuard, you can trust AmneziaWG just as much.
The one meaningful difference is in the threat model: obfuscation makes the mere fact that you're using a VPN less visible to DPI. That matters a lot in countries where using a VPN can carry fines or criminal penalties.
Bottom line
AmneziaWG is WireGuard with an invisibility cloak thrown on. Most of the time, you don't need the cloak, and plain WireGuard is the better choice. But in countries with aggressive DPI filtering, AmneziaWG is often the only protocol that actually works.
If you're in Russia in 2026, we'd recommend defaulting to AmneziaWG. If things change and WireGuard starts working reliably again, you can always switch back.
RuSolv supports both protocols — you choose when you create a connection. Start with the first free 30 minutes to test both on your own network.
