) but = just wonder if anyone could comment on the specific security implication = of using minimal or no security on the TCP tunnel mechanism (which seems = poorly implemented by udp2raw particularly), and relying on the = underlying WireGuard encryption? Or is this crazy? Is there any other = satisfactory Unix-based mechanism to tunnel UDP over TCP? I feel like if I run a WireGuard tunnel through an encrypted SSF tunnel = I may as well just be using SSF by itself, however the ease of setting = the default route on my laptop with wg-quick is a great feature and I am = very impressed by the quality of WireGuard and the focus on security so = would like to continue using it if possible. Thanks, Ryan= --Apple-Mail=_488820B3-F2D8-422C-8A56-8A7DA0EEE0A7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi,

I = appreciate this is a bit of a noob question not directly related to = WireGuard and has been covered before, but I=E2=80=99m just hoping for a = bit of advice and clarity. I=E2=80=99ve got a WireGuard tunnel up and = running nicely between my MBP laptop and my Debian server at home and am = hoping to use it as a VPN while travelling.

However I=E2=80=99ve found an issue = when my laptop is behind work firewalls which block UDP, and not wanting = to be encountering this issue overseas have been looking at tunnelling = options. I have been using a SOCKS proxy generated with OpenSSH up until = now, but it=E2=80=99s difficult to route all my laptop=E2=80=99s traffic = via the proxy.

I=E2=80=99m aware of SSF (https://securesocketfunneling.github.io/ssf) and udp2raw = (https://github.com/wangyu-/udp2raw-tunnel/blob/master/doc/openv= pn_guide.md) which has been covered on this list before (https://lists.zx2c4.com/pipermail/wireguard/2018-May/002915.htm= l) but just wonder if anyone could comment on the specific security = implication of using minimal or no security on the TCP tunnel mechanism = (which seems poorly implemented by udp2raw particularly), and relying on = the underlying WireGuard encryption? Or is this crazy? Is there any = other satisfactory Unix-based mechanism to tunnel UDP over = TCP?

I feel = like if I run a WireGuard tunnel through an encrypted SSF tunnel I may = as well just be using SSF by itself, however the ease of setting the = default route on my laptop with wg-quick is a great feature and I am = very impressed by the quality of WireGuard and the focus on security so = would like to continue using it if possible.

Thanks,

Ryan

= --Apple-Mail=_488820B3-F2D8-422C-8A56-8A7DA0EEE0A7--