AmneziaWG protocol v2 or VLESS tunnel support?

Currently using a Beryl AX / MT3000.

Ive downgraded to Op21 latest beta purely to get Amnezia v1 support in the tunnelling. This works fine.

However, it means ive lost the USB high power wifi driver support etc from op24.

Question is, are there any op24 clients for AmneziaWG (ideally protocol v2) or VLESS tunnels i can use?

1 Like

The gl op24 firmware will be updated later to support AmneziaWG VPN in Beryl and Flint2.

AmneziaWG 2.0 is currently under pre-research, and it may be supported in the future.

VLESS may not be supported since no VPN commercial providers support this protocol.

Thanks for that. Hopefully Beryl AX will get it eventually and i can move back up.

Shame about VLESS, its the only protocol i can use to get through some hotel and public WiFi here that works on a default deny.

Beryl AX will also be supported, please be patient.

I think if you can build and host a VLESS server, installing a VLESS client on the router and configuring it in LuCI shouldn't be a problem.

The main question is that most VPN providers don't offer connections using the VLESS protocol.

@gnirtS — one angle worth adding: the server side.

While op24 firmware catches up to AmneziaWG 2.0 client-side, you can already run an AWG 2.0 server today with amneziawg-installer (bash, one command, Ubuntu/Debian + ARM — Raspberry Pi, Oracle Cloud Ampere free tier, Hetzner CAX arm64). When op24 eventually ships the 2.0 client, you point firmware at the same endpoint — no server migration.

The op21 beta you're on speaks AWG 1.0. The installer generates AWG 2.0 configs by default (H1-H4 randomization, S1-S4 padding, I1-I5 CPS), but you can drop to AWG 1.0 wire-compat by clearing I1-I5 in /etc/amnezia/amneziawg/awg0.conf and re-running manage_amneziawg.sh regen CLIENTNAME — same kernel module, no reinstall.

On VLESS: AWG 2.0 with Jc=3 + binary I1 has been clearing mobile carrier DPI (Russian carriers — Yota, Beeline, Tattelecom, Tele2 Moscow). Not the same layer as hotel default-deny over 443/TCP, but worth a shot if you have UDP egress available.

Repo: GitHub - bivlked/amneziawg-installer: One-command install script for self-hosted AmneziaWG 2.0 VPN — Ubuntu & Debian, DPI bypass, traffic obfuscation, auto-hardening, client management · GitHub — MIT, kernel-native, no Docker, 146 bats tests.

1 Like