[Beta Release] Beryl AX (GL-MT3000) v4.8.2 with New WireGuard Obfuscation Support

Routers
1

To our GL.iNet supporters,

We’re excited to announce the beta release of our new firmware v4.8.2, which brings an important upgrade to the VPN function module. This version now adds support for WireGuard obfuscation, allowing both server and client to use the AmneziaWG obfuscation protocol to disguise VPN traffic for better privacy and connectivity.

Please note that firmware v4.8 will first be available on these GL.iNet models:
Beryl AX (GL-MT3000)

Go to the download page for the router model (Please note that it is the BETA tab):
Beryl AX

Follow these steps to try it out:

  1. Go to the download page for your router model (please note that it is under the BETA tab).
  2. Click Download for Common Upgrade.

Here are the exciting new features and upgrades:
● WireGuard Obfuscation (AmneziaWG protocol) – disguise VPN traffic for enhanced security.

We will continue to keep you posted on further updates and improvements to our firmware!

The GL.iNet Team

12 Likes
2

I don’t need it as server, but here is my first report of using it as a client: [Feature request] Replace Wireguard with AmneziaWG - #167 by xa0c

Thank you. It works.

3

Fantastic!
I’ll travel soon to China and I’ll test it, because I have two GL-MT3000 :+1:

1 Like
4

This is really “Amnaezing News”. Thank you for this update.

1 Like
5

BTW, which version of Amnezia protocol is supported? 1.0?

They released v1.5 few months ago: Using the AmneziaWG 1.5 Protocol on Self-hosted Servers | Amnezia Docs

[Repository]

6

I think currently the 1.0 is supported.

1 Like
7

@bruce,will you also implement this in the OP24 firmware for the MT3000 and MT6000?

1 Like
8

When using this as a client, what’s the requirement for a self hosted VPS?

9

Depends on your load. It starts and working fine for one person with using regular surfing+youtube on 1core 2Ghz and 1Gb ram.

10

What I mean is what kind of software is required on the self hosted VPS? Regular version of Wireguard Server or AmneziWG server?

11

You should use AmneziaWG kernel module for best speed Installing AmneziaVPN on Linux | Amnezia Docs

2 Likes
12

This is very exciting news!

I am based in the USA so I have lower need for this feature than some users, but I would like to be prepared for the eventual case of needing to use an uplink which blocks Wireguard. I sometimes connect in repeater mode from retail stores, restaurants, etc and they will inevitably block Wireguard more in the future.

I just today upgraded my Beryl AX to the 4.8.2-op24 release, it doesn’t look like AmneziaWG is supported in op24 yet, but once it is, I will set up an Amnezia VPS endpoint and start testing it.

1 Like
13

@bruce you added or REPLACED normal wireguard?

Because I don't really trust Amnesia binary (since it have roots in russian region as I know)

14

Sure! But now it's just small-scale testing, only for MT3000 snapshot firmware.

1 Like
15

The standard WireGuard program + AmneziaWG program coexist in firmware, after identifying the VPN profile and run the corresponding program process.

Like say, you enabled two tunnels in VPN Dashboard, one is the obfuscation profile and will run with AmneziaWG process, and the other is the standard WireGuard profile and will run with standard WireGuard process.

2 Likes
17

Super! That's why I love GL! You always give users choice.

2 Likes
18

Has anyone tried the new AmneziaWG 2.0 yet? It appears to add several features aimed at improved obfuscation, but we don’t have a clear sense of its stability.

If there’s demand，perhaps we could put together a new beta release for it.:thinking:

4 Likes
19

You must connect to a server running the amneziaWG protocol to have an obfuscation effect. So you should install amneziaWG

20

I'm looking forward to trying it. I have a Flint 3 at home and a Beryl AX for travel. A beta release for the Flint 3 would be great! Thanks in advance for the work you guys do.

4 Likes
21

Using it by 2 days in China and it seems to work really well.

Surfshark doesn't work in China, while my own VPN (one Beryl AX at home working as a server, and the another one is working as a client.

3 Likes