The Imitation Game: Making AmneziaWG 2.0 Harder to Classify
An engineering look at AmneziaWG 2.0 protocol imitation, the standalone proxy and probe responders, with practical limits of QUIC, DNS, STUN and SIP camouflage.
Technical Blog
Engineering notes, deep dives, implementation stories, and practical articles on Windows networking, packet filtering, proxies, VPNs, and related systems work.
WireSock Secure Connect 3.x: Beyond the Release Notes
An engineering look at WireSock Secure Connect 3.x: service architecture, network lock, global split tunneling, AmneziaWG 2.0 and its two CLI roles.
Cloudflare WARP via Dante SOCKS5: A Netflix Routing Experiment
A historical WireSock experiment routing Cloudflare WARP through a US Dante SOCKS5 proxy, with checks for tunnel routing and Netflix playback.
Configuring Dante as a SOCKS5 Proxy for Cloudflare WARP on Ubuntu 24
Configure a restricted Dante SOCKS5 UDP relay on Ubuntu 24.04 for one Cloudflare WARP WireGuard endpoint, including firewall and relay-address checks.
Unhelpful IP Helper: A Handle Leak Story
An investigation of a process-handle leak observed through IP Helper owner-module lookups during WireSock process-based split tunneling.
BoringTun based WireGuard client for Windows
The original 2021 BoringTun-based WireSock client architecture, C interface notes and historical gigabit-network measurements.