Hi! I’ve got a newbie question about how WireGuard and TOR work together. I keep finding older posts about how they can’t work together because WireGuard is UDP only while TOR is TCP only yet I’ve been using a WireGuard VPN before TOR and everything seems to work perfectly.
Does this mean that the VPN is somehow being bypassed or did something change recently that could explain why it just works ?
Also, is there a way of confirming what IP the TOR guard is seeing ?
Thanks!
Hello! If I understand correctly you want to know if WireGuard and Tor have any known issues running together. From what I can tell you from personal experience, I am running both of them on my server and they work.
Or, if you’re referring to using them on your personal client, you can use a VPN and connect to TOR. It’s possible.
Read this:
https://www.wireguard.com/#simple-network-interface
TLDR;
WireGuard takes whatever you ask it and encrypts it into a UDP packet then sends it to its peer at the end of the tunnel.
The peer decrypts the packet and sends it on its way.
What’s inside your packets?
In the case of a request for a web site (CNN dot COM) this would be a TCP http(s) packet and the whole thing is encrypted and encapsulated into a UDP packet then sent to the peer at the end of the tunnel. The peer sends the un-encapsulated TCP http(s) packet to the guard. The return trip is the opposite. The guard would see the IP of the peer at the end of the tunnel.
If the request is, let’s say, a regular UDP DNS request or an ICMP ping then I would guess that it is sent on its way directly to the internet in the same manner as if Tor would not be its destination. The return trip is the opposite.
Is un-encapsulated even a word?? If not I claim a copyright or left. 
You can run Tor over a WireGuard VPN, but you can’t run WireGuard over Tor.
This means that Tor Browser will work on a machine that has set up a WireGuard VPN.
This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.