Conversation

Notices

1. Embed this notice
   reldred (reldred@social.bcicorporate.com)'s status on Wednesday, 08-Jul-2026 09:07:48 JST reldred
   Anyone got any experience running wireguard over non permissive networks? The ole running it over UDP53/UDP123 isn't cutting the mustard. I've got a wifi network with a captive portal (Cisco) that I often have to use when the LTE in this place is screwed. Other VPN's work fine, but I prefer to run my shit over wireguard when I can.
   • Embed this notice
     pwm (pwm@darkdork.dev)'s status on Wednesday, 08-Jul-2026 09:07:47 JST pwm

     in reply to
     @reldred back in the day I put an ssh tunnel over port 80/443 to get around the corporate firewall, but wireguard, no
   • Embed this notice
     bajax (bajax@baj.ax)'s status on Wednesday, 08-Jul-2026 09:08:01 JST bajax

     in reply to

     • bajax
     @reldred at least openvpn on tcp 80 or 443 is the first thing I'd try.
   • Embed this notice
     pwm (pwm@darkdork.dev)'s status on Wednesday, 08-Jul-2026 09:08:01 JST pwm

     in reply to

     • bajax
     @bajax @reldred > tcp over tcp
     Good luck
     Blurry Moon likes this.
   • Embed this notice
     bajax (bajax@baj.ax)'s status on Wednesday, 08-Jul-2026 09:08:02 JST bajax

     in reply to
     @reldred most of these I've dealt with blocked all UDP traffic by default. if you really need to do that often, you might need something like openVPN as a fallback.
     
     I know it's a pita
   • Embed this notice
     reldred (reldred@social.bcicorporate.com)'s status on Wednesday, 08-Jul-2026 09:10:38 JST reldred

     in reply to

     • pwm
     @pwm@darkdork.dev yeah that was the go back in the day, was great on campus networks half the time you could just do it over the normal SSH port because the netadmins were lazy and didn't like their own stuff getting blocked. I found it even worked on some campuses that forced everyone through an authed socks proxy, could still ssh outbound with no restrictions.
     pwm likes this.
   • Embed this notice
     reldred (reldred@social.bcicorporate.com)'s status on Wednesday, 08-Jul-2026 09:13:50 JST reldred

     in reply to

     • pwm
     @pwm@darkdork.dev i dont wanna setup ovpn though i hate it so much 😭
     pwm likes this.
   • Embed this notice
     bajax (bajax@baj.ax)'s status on Wednesday, 08-Jul-2026 09:14:11 JST bajax

     in reply to

     • pwm
     @pwm @reldred rofl it was awful but when you're stuck in class you can tolerate a lot
     pwm likes this.
   • Embed this notice
     pwm (pwm@darkdork.dev)'s status on Wednesday, 08-Jul-2026 09:14:24 JST pwm

     in reply to
     @reldred I despise ovpn
     Once wg hit the kernel I was done forever
   • Embed this notice
     reldred (reldred@social.bcicorporate.com)'s status on Wednesday, 08-Jul-2026 09:17:45 JST reldred

     in reply to

     • pwm
     @pwm@darkdork.dev Yeah I've been using WG a bit on mikrotik hardware which Showed Me The Light. The fact that it also worked well over CGNAT'd connections was super handy. At my last work I started pivoting everyone who was able to away from l2tp/ipsec to wireguard tunnels. Tunnels established instantly, were more robust, could handle ad-hoc multi-site setups for events over starlink and LTE connections easily, was great.
     pwm likes this.