Does Mullvad already support AmneziaWG on their server side ?

[User00123]

Hi. Does Mullvad already support AmneziaWG obfuscation on their server side ?
I can not find any AmneziaWG informatoin on Mullvad official site.

[yoloshii]

No, actually Mullvad does not support AmneziaWG on their servers - they use standard WireGuard. However, AmneziaWG obfuscation is client-side only and works with any standard WireGuard server. It appears Mullvad are focusing on their app for QUIC obfs for now, so a network-wide implementation like this repo needs to execute mimic params through AmneziaWG or some other fork or protocol that supports it. It also looks like Mullvad are adding QUIC to their servers, so you may not even need to do it locally if you connect to the right server.

The obfuscation parameters in this repo (Jc=4, Jmin=40, Jmax=70, etc.) are AmneziaWG compatibility mode defaults extracted from existing repos. These values are specifically chosen to add DPI obfuscation while remaining compatible with vanilla WireGuard servers like Mullvad.

I will be adding a stealth escalation feature that progressively combines multiple obfuscation protocols users can choose from depending on the degree of DPI evasion they need.

[User00123]

One more thing, I see an openwrt branch in Mullvad code.
https://github.com/mullvad/mullvadvpn-app/tree/openwrt/openwrt

[yoloshii]

That's for Mullvad app, which uses their own daemon (not applicable for AmneziaWG). Mullvad app is for single devices so far, but for network-wide like the privacy router, we currently need third party like AmneziaWG for obfuscation. Good link for understanding their infrastructure though.