yashsingh1/xdaforums huggingface dataset:
[Android General] THERAJ12:
Can you generate new config files from the site?

---------- Post added at 12:00 PM ---------- Previous post was at 11:57 AM ----------

It's working again I was able to regenerate files from azire

---------- Post added at 12:09 PM ---------- Previous post was at 12:00 PM ----------

Still can't get it to restore on boot even tho I've toggled the option cleared cache etc but I did download all new files they must have updated something
[Android General] Donric13:
I didn't test apply on boot. But i think you could also use a tasker profile to do this. Then it should work.
[Android General] Cryptycat7:
I reached out to them on Twitter. The downtime was a result of a Backend Problem with an expired TLS certificate.

https://twitter.com/AzireVPN/status/976096066088177664?s=19

That's what I call amazing customer support, we are not even paying for a normally paid service. [MENTION=2058807]there[/MENTION]ja12
[Android General] rudolfm:
We get free sevice because we are willing to test. Testing includes some things going wrong. No need to panic.

We pay nothing and get something, thanks Azire.
[Android General] THERAJ12:
No one is panicking its providing feedback because we are indeed testing and as a community we keep each other informed via discussion..yes thanks to Azire indeed Wireguard is great
[Android General] Schroeder09:
So just download new config files from azire and all will be well and function again?
[Android General] bond32:
Not sure if anyone was curious, but it is possible to use DNSCrypt with Wireguard. I was able to use the DNSCrypt-Proxy 2 magisk module by modifying the config file. AzireVPN actually offers a DNSCrypt server, so with the magisk module, you can force it to use the correct DNS server with port.

https://github.com/jedisct1/dnscrypt-proxy/wiki/Basic-dnscrypt-proxy.toml-editing

By default, AzireVPN uses its own DNS server(s) which is fine. But I was curious if DNSCrypt also worked.
[Android General] THERAJ12:
That's cool...which config file did you need to modify the azire on? Is there any speed benefit or just added security?
[Android General] Cryptycat7:
I just waited a couple of hours and it started working again.
[Android General] bond32:
AzireVPN may default to the DNSCrypt dns server by default. But only if the DNSCrypt proxy is on the android device maybe...

See the link in my previous post. After the module is installed, modify the "dnscrypt proxy.toml" file - where it says "# server_names = ..." I just added the ipv4 and ipv6 DNS servers from AzireVPN and added the port 443 at the end of each.
[Android General] THERAJ12:
Do you happen to have a profile or script setup to do this?
[Android General] jcmm11:
I have a script. Using Magisk. Place it in /sbin/.core/img/.core/service.d/

Permissions should be 700 (rwx --- ---)

Make sure you have wg and wg-quick installed. The configuration files are in /data/data/com.wireguard.android/files/

I create log files that are placed in /data/local/

#!/system/bin/sh
Log="/data/local/wireguard-start.log"
Error="/data/local/wireguard-error.log"
#
#Canada
#Vpn="azirevpn-ca1"
#
#Spain
#Vpn="azirevpn-es1"
#
#Sweden
#Vpn="azirevpn-se1"
#
#United Kingdom
#Vpn="azirevpn-uk1"
#
# United States
Vpn="azirevpn-us1"
#
echo |tee $Log >$Error
date|tee -a $Log >>$Error
echo |tee -a $Log >>$Error
wg-quick up $Vpn >>$Log 2>>$Error

Just uncomment the Vpn line you want to use and comment the rest. The above is currently set to use the server in the United States.
[Android General] Koloses:
Can somebody tell me how does Wireguard detect that tools needed are installed? The installation has failed for me due to superuser being denied and later granted though app says that command line tools are already installed (which is false). Trying to bring up interface throws error 127. I need to fix this manually.

Edit: nvm, found source for installer here https://git.zx2c4.com/wireguard-and...om/wireguard/android/util/ToolsInstaller.java

and manually retraced steps needed.
[Android General] THERAJ12:
Strange I have granted SU and I installed the tools but after every restart it says the tools are not installed...guess I will try a full app wipe/re-install
[Android General] Schroeder09:
Azire said my subscription was up when I went there a week ago for new config files because this was NOT working AGAIN. I thought azire was free indefinitely for use with wireguard.

I have abandoned this VPN business. It never works when you want it to because it seems like most IT groups for public places have set up anti-VPN protocols. Switching it on and off is a PITA. That free one is constantly down, and sure, beggers can be choosers. I get it. It's free.

The whole VPN thing in general is eluding me. I've never got an answer of what these are good for where we can access pretty much everything. Nothing is blocked for our access like in other places. In America they'd be used for security and 90% of public WiFi I try getting on with the wireguard enabled fails to function. So you can use a VPN at home on your own private network. What good is that? I'm abandoning this. :(
[Android General] bond32:
This isn't for you. I don't know what you were hoping to gain in the first place from using Wireguard, Azire, any of it.
[Android General] rav101:
Remember this is still in active development so isn't yet a polished product with many VPN providers using the WireGuard protocol.

VPNs in general are good for privacy and freedom. This is good for different reasons.

1) Unblocking sites in your country. This may or may not be a big deal depending on how free the internet is where you are.

2) protecting your data. This is specifically good when shopping online or using online banking services

3) torrenting or streaming certain content if that is your preference.

4) making it look like you're in a different country: streaming netflix from different countries or having access to different shopping websites etc.

Those are a few of the top of my head. I know with the free WireGuard app you can create a toggle on the quick settings to turn off the VPN really easily with the last selected Vpn service. That's pretty easy.

I'm not gonna lie, I did have issues with Azire and I'm now using a different (not free) service. It's great, no issues and a fast connection.

Each to their own though.
[Android General] jcmm11:
No reason for pm. Log file is created by the script when it runs so you can check the results. No module, just placing it manually as stated in the post. I gave you script, location, needed permissions. You shouldn't need anything else. Just make sure that wg and wg-quick are installed.
[Android General] THERAJ12:
works perfect thanks
[Android General] THERAJ12:
However I did notice with this script you can't turn off WG even to switch locations or just temporarily...would have to edit script file and reboot... Idk why the on boot setting doesn't seem to work...still a great script tho
[Android General] jcmm11:
To bring down an interface. Terminal emulator, as root,

wg-quick down <config file (without the .conf)>

Replace down with up to bring up an interface.
[Android General] alphazo:
Since the "start on boot" in the GUI doesn't seem to work I tried your script but it doesn't find configuration file called "vpsnl":

more /data/local/wireguard-error.log

Thu Apr 5 14:08:55 GMT 2018

Error: Unable to find configuration file for `vpsnl' in:
- /data/misc/wireguard
- /data/data/com.wireguard.android/files

The file vpsnl.conf is definitely under /data/data/com.wireguard.android/files and I can manually start that tunnel with:

wg-quick up vpsnl

Could that come from the service starting too early when the data partition is not yet decrypted?

[EDIT] I added

sleep 40

just before the "wg-quick up..." in your script and now the vpn starts on boot ;) Not the most elegant way but well that will do it until the GUI option works.
[Android General] jcmm11:
Did you place it in service.d or in post-fs-data.d? In post-fs-data.d I can definitely see problems like you describe, but in service.d you should be fine, although I suppose there could be some device dependant issues. In any case I suspect that 40 is way higher than you need.
[Android General] alphazo:
I put it in service.d as recommended. I tried with "sleep 10" but it didn't work. Using "sleep 20" works though.
[Android General] THERAJ12:
Anyone using cloudflare DNS with WG? I changed the DNS #s to cloudflare #s on the Conf files but not entirely certain its doing anything
[Android General] Unreasonable_User:
Mullvad put up a web tool to generate .conf files for use on Android and Linux.

The VPN connects but I've got DNS and WebRTC leaks according to their connection check tool. Haven't got time to look into that atm, but remembered people asking about wireguard and mullvad before, so here ya go.
[Android General] rudolfm:
WebRTC leaks are done by the browser, not by the VPN.
[Android General] MPeti1:
Hi!

AzireVPN's service is working for me, but i wanted a little bit more. I tried to add a new peer, and on an other android device I tried to connect to the interface of my phone. But it seems I did something wrong, because the traffic does not go through the wg vpn on the other device. The main problem is I don't really understand what is the "addresses" section at the interface (maybe it's a sub-network inside my phone? but it makes no sense.. (for me), or maybe it's an ip directly to the interface on my phone which i can use to connect to in any device on the same LAN?), and what address should I type on the other device at the Peer's endpoint (the real ip of my phone, which is fixed to 192.168.0.182, or the interface's ip on my phone which is 10.10.29.107?)

Here are the screenshots about the configurations. Could you help me please?
[Android General] fink.nottle:
The peer is your server. You already have a peer. Adding another peer to your client doesn't make too much sense for conventional vpn client use. What are you trying to achieve ? Do you want your android device to act as a wireguard server ?
[Android General] MPeti1:
Yes. The main goal is to encapsulate the other device's packets inside my packets.

There's a place where i know the wifi network's password, and I'm allowed in the firewall by admins to send packets outside of this network. But i have also this other device, and i want it to be able to use this wifi network to have internet connection. I don't think admins would add this other device to the whitelist.

I also have an other problem with this network, but more about it later. I can test this part at home, so it's not that important at the moment.

I know all peers are servers, because in p2p connections it means the same.
[Android General] fink.nottle:
Making your android device a server will require 1 ) Kernel support for wg 2 ) Static ip or a dynamic dns like service 3) firewall configuration to allow incoming connections 4) Not getting killed by android's power management 5) Likely some other plumbing. In short, it will be too much work.
[Android General] SeberNoid:
sorry for a kind of newbie question. I got a vpn from integrity.st (5july.org), but it seems like WG won't accept my config file. do we need a specific vpn provider to use WireGuard or am I missing something? I'm using the same file as I do in openvpn.

edit: I'm not an expert while it comes to linux so the webpage didn't help me

and I'm running ceasium kernel which should ship with WG support
[Android General] jcmm11:
The VPN provider needs to support wireguard. To the best of my knowledge (definitely not expansive on this topic) the only 2 providers currently supporting wireguard are Azire and Mullvad - although there are a number of others looking at it.
[Android General] MPeti1:
Is there a chance that in the future it will work without kernel support?

What would you recommend to achieve what i want?
[Android General] fire_onCA:
Its wierd i cannot access to azire vpn website
[Android General] jcmm11:
I'm connecting with no issues
[Android General] fire_onCA:
I mean i cannot open the website that is given in the thread...:( maybe if i can open it i will be able to connect
[Android General] jcmm11:
Try this one instead.

https://www.azirevpn.com/manager/auth/register

Looks like they changed the URL.
[Android General] fire_onCA:
Thanks i can now open... Whats to put in refferal??
[Android General] jcmm11:
Leave it blank
[Android General] rudolfm:
Wireguard App is now available via Fdroid

https://f-droid.org/packages/com.wireguard.android/

Version is 0.4.1 (406) 2018-04-28

If you want to use the Frdoid version you'll need to uninstall the playstore version first as they have different signers. I also needed new conf files from Azire, but this might be coincedence.

I didn't see anything new.

Update: at least until i had a closer look. Until now i used Wireguard only on a y550 with WG in the kernel. Now i tried it on a phone with 'stock' Lineageos, and it works. As this might have been for some time, today is the first time i tried it. So it might not be new for you.
[Android General] THERAJ12:
How to generate new files? The old site no longer works it seems

USA and UK server seems to be down

Working today
[Android General] andersjohansson81:
So I have been using wireguard with azirevpn for some time now , but cant get it to work on cell network. It works fine when im on wifi but i get no internet at all when im on cell network. Using latest azirevpn config file. Sultanxda linage ,nougat, magisk root and xposed systemless ,1+3T. Any ideas? browser returns: ERR_PROXY_CONNECTION_FAILED
[Android General] rudolfm:
I am writing this using Lineageos 14.1, wireguard App, and mobile network. It might be something specific to your provider.

Btw, is ist possible to have my own private key with Android. The App uses a .conf file, where Azire set (and knows) my private key. The Linux script generatey the private key and doesn't seem to send it to Azire. The App has a button to generate keys, but then the vpn stops working.
[Android General] jcmm11:
Try creating a new config file. Instead of using the default port try using port 443. ( Advanced options when creating config).
[Android General] andersjohansson81:
Thanks for reply, but it didn't help, still the same
[Android General] jcmm11:
Modify apn and remove proxy? Guessing.
[Android General] floorge3:
I removed the proxy from my apn and now works on my mobile data
[Android General] maXDAmn:
is it possible to run WG without flashing any kernel mod?
[Android General] Skello:
Yes. Since a couple of versions ago, the Wireguard Android GUI app available on Google Play supports stock ROMs by using the Android VPN API if the kernel module is not detected. Using the Android VPN API has a performance penalty compared to using the kernel module, but it's still better than OpenVPN.
[Android General] zx2c4:
Excellent answer. Couldn't have said it better myself.
[Android General] poster74:
Hi,

I have the latest version of the app installed from fdroid. It seems to be working fine however, the 'restore on boot' setting doesn't seem to work at all. My custom rom doesn't support wireguard natively

I would expect to it to connect to vpn automatically after phone is rebooted. It just doesn't, have to to do it manually each time.

- As anyone got this 'Restore on Boot' working ? Any work-arounds?
[Android General] Schroeder09:
Is this the only way to get old config files to work? I thought azire was always going to be free when I installed this, but my config files don't work anymore. When I went back to get more it said that my subscription was out and I had to start paying.
[Android General] jcmm11:
???? My config files are still working fine. Also their website still states that wireguard is free.

That being said they never claimed that it would always be free. Just that they wanted to test their setup at a larger scale. But for the moment it's still free. If you have an issue I suggest contacting Azire.
[Android General] Hamidreza_4u:
I install it on my miA1 and can't connect.

Help me please.

Thanks
[Android General] kemdroid:
Did you buy azure?
[Android General] Hamidreza_4u:
No it's free registration
[Android General] kemdroid:
For ever? I did it but it's asking for money...
[Android General] Hamidreza_4u:
No i use it for mor than a month
[Android General] kemdroid:
Ohh. It works? Send me configuration file
[Android General] Hamidreza_4u:
U should use root rom with magisk root tools and flash wireguard module to use it.
[Android General] Aeodyn0:
I'm using the userspace Android app with Mullvad, and it's been working great so far. Much better startup performance than OpenVPN, it's ridiculous. ?

Only thing that's been bugging me is that I can't access the local network while connected to the VPN. I'm rooted, and running the command `ip rule add table main suppress_prefixlength 0` from https://www.wireguard.com/netns/ fixes it, but it would be nice to have that included in the app, or an exclude list or something.

Or if anyone has tips on how to do something like that with AFWall+/iptables, that would work too.

Oh, also, I don't think "Detect MTU" is working quite right? It went to 1280 for me, but manually setting it to 1500 works perfectly, including for 6in4. (Wow I hate that OpenVPN bug so much.)
[Android General] kemdroid:
Wireguard is already enabled in my ROM.

My issue is when I use the configuration file it does not work anymore
[Android General] maXDAmn:
sorry, but is it possible to make a vpn connection using openvpn configuration? and if it possible then how to make it?
[Android General] Zackptg5:
Nope
[Android General] rudolfm:
You don't need root.

You don't need to flash anything.

You don't need to pay Azire.

You don't need Azure :)

You do need to read and follow the instrucions at the beginning of this thread.
[Android General] kemdroid:
I'm telling you it's asking me to pay. Look at Screenie
[Android General] Zackptg5:
Look at this one
[Android General] kemdroid:
But that's wire guard? How do I install?
[Android General] Zackptg5:
It's all outlined here: https://www.azirevpn.com/support/guides/mobile/android/wireguard

Make your cfg files, import them into app, profit
[Android General] kemdroid:
Wow. Thank you! I appreciate it. It works!
[Android General] qewlpal:
I followed instructions correctly, have kernel module enabled in my ROM, installed wireguard app and imported the zip.

But for starting the interface it is asking for root.
[Android General] zx2c4:
Yes. If you have the kernel module, then you're running a custom ROM and you're fully equipped to install Magisk and have root. If you don't have the kernel module, then it falls back to the slower userspace version that doesn't require root.
[Android General] davidzam:
Hello i was wondering if this Wireguard app has support for Betternet and Windscribe. How can I use their protocols through Wireguard?. If it's possible off course. Can you point me in the right direction? Thank you
[Android General] qewlpal:
Thank you for replying. Got it.

Amazing work and yes working at blazing speed, almost same speed as without VPN.

Using on both my Phone and Laptop (ArchLinux)
[Android General] THERAJ12:
I have the magisk module installed on a custom ROM but WG still won't ask for root and shows userspace...so it it my kernel then?
[Android General] Zackptg5:
The magisk module is really out of date, it has old binaries and is why it isn't working
[Android General] jugoslavpetrovic:
What if we are using SuperSU?
[Android General] zx2c4:
You tell me.
[Android General] jugoslavpetrovic:
Even after granting root, it aays I nees root. Nonsense.
[Android General] jugoslavpetrovic:
Here.

And I can't toggle anything.
[Android General] zx2c4:
Send a log.
[Android General] jugoslavpetrovic:
Server toggles works now after update if app. I still can't install platform tools as it says I need root that I have already.

Now, I am new to this app and still trying to figure out. Do I need those tools? How do I know if vpn is working? I don't see the key icon on status bar.
[Android General] jcmm11:
Only need tools if writing scripts or interfacing using terminal emulator.

No key icon because of how this works (not like 'normal' VPN)

Check if working (assuming Azire) go to www.azirevpn.com

Look in upper left hand corner. If you see a little green lock with the words 'You are connected' next to it then it's working. (You can click on that phrase for some more info)
[Android General] jugoslavpetrovic:
Oh, right. Thanks a lot.

It says connected and I have this one red heart. It says it is easy to fix it but I don't know how.

Also, I got azire for 24h free, so there is no free service? Or it seems like somewhat limited.
[Android General] Cryptycat7:
The kernel module didn't make it into android, yet. Would be a great feature for Android P.

That VPN icon pops up, if you connect to a OpenVPN server. Wireguard needs the kernel module to unleash the full potential of the protocol. That is accessable only for Linux users and users of custom ROMs and kernels. To make wireguard available to a wider audience, wireguard supports a userspace integration as well, which is performing worse. Userspace can't "compete" with kernel space. While the phone wouldn't boot without a kernel its still functional when you remove userspace stuff.
[Android General] jugoslavpetrovic:
Thanks. I am not that much into this stuff so I needed to read this few times to understand, lol
[Android General] Cryptycat7:
No worries, let me know if you have open questions. I am glad when I can help.
[Android General] jcmm11:
The 24hrs free is for their openvpn service. Wireguard is currently completely free (with no promise it'll stay that way forever, but for now there's no time limit)

Webrtc can be easily turned off using the Privacy Badger add-on for Firefox or you can follow the directions further on in that page to use about:config

Chrome for Android doesn't support extensions so we're out of luck on that front.

They can't check my dns because I'm using 1.1.1.1 rather than their dns.
[Android General] zx2c4:
Sorry, but if you want help with installing those tools, you're going to have to send the log. This is the last time I'll request it; then you're on your own.
[Android General] zx2c4:
This misleading answer does not correspond with the issue at hand. jugoslavpetrovic's phone uses the kernel module. That's why he's asked about things like "where's the key icon" and "command line tools", features that are only available to those with the kernel module. That's further confirmed in the screenshot he sent, which indicates his kernel module version. Why are you complicating matters by contrasting it to the userspace implementation and the availability of it?

The only issue at hand here is that the command line tools aren't installing. And to fix that, I'll need a log of what happens when he presses the button. jugoslavpetrovic - can you send this.
[Android General] Cryptycat7:
[MENTION=5434776]zx2c4[/MENTION]

First I want to thank you for your groundbreaking work on Wireguard and I ask for apology about misleading and misunderstanding. Enabling a VPN connection using the kernel module should trigger the lock icon on the right side of the status bar? Maybe I am missing something, but on my two devices running an AOSPA 8.0 dev build and onU11+ with cleanslate kernel I can't trigger the lock icon The only VPN indication I can trigger is the key that shows up as persistent notification when you enable the always on VPN from Android VPN settings. Establishing a connection using OpenVPN triggers the lock icon on the right side of the status bar at all times.

I check XDA during my lunch break and currently I am super hyped by the results, that I am achieving with wireguard. Spent the nights before in front of my laptop, because I couldn't stop experimenting with wireguard. Yet I am not qualified enough to turn my penetration testing hobby into a profession. Doesn't help my focus around 15:12 UTC as you pointed out.

For now I am just an international relations student, that is often blamed for going into irrelevant details.;) Running Wireguard on an Acer laptop with Manjaro Linux installed testwise now. Everything smooth sailing, but didn't expect anything else.