البروتوكول

AmneziaWG

A WireGuard-based protocol, available as an alternative path.

AmneziaWG is the second core protocol in RunVPN and the alternative path to VLESS-Reality. It starts from WireGuard — the fastest mainstream VPN protocol — and changes only the parts that make standard WireGuard easy to recognize on a network: the handshake signature and the packet-size profile. The cryptography stays untouched, so you keep WireGuard-class speed with far better connection stability on difficult networks.

WireGuard: fixed handshake signature — easy to identify You Server AmneziaWG: junk packets + padding — blends with ordinary encrypted traffic You RunVPN server AmneziaWG 🔒 WireGuard cryptography inside — unchanged

How AmneziaWG works

1

The WireGuard core, unchanged

WireGuard earned its reputation with restraint: a single modern cipher suite (ChaCha20-Poly1305 with the Noise handshake), a codebase of a few thousand lines that is realistic to audit, and a lean state machine that reconnects in a blink when you move between Wi-Fi and mobile data. AmneziaWG inherits all of this directly — the key exchange, the encryption and the performance profile are identical.

2

A masked handshake

Standard WireGuard has one practical weakness: its handshake has a fixed, recognizable shape. On networks that treat unknown protocols harshly — congested hotel, campus or mobile networks — that signature can mean throttling or dropped sessions. AmneziaWG sends configurable junk packets around the initiation and removes the fixed signature, so the exchange no longer announces itself as vanilla WireGuard.

3

A tuned packet profile

Beyond the handshake, WireGuard's packet sizes follow a predictable pattern. AmneziaWG adds configurable padding and header adjustments that make the flow statistically closer to ordinary encrypted web traffic. The point is consistency, not concealment of your activity: your data is encrypted either way — the tuning simply keeps a private connection stable where plain WireGuard would stutter.

4

Automatic in RunVPN

AmneziaWG is configured entirely on the server side. After you sign in, the RunVPN app fetches its configuration and chooses between AmneziaWG and VLESS-Reality automatically: networks where UDP is reliable lean toward AmneziaWG, while networks that filter UDP get VLESS-Reality over TCP. There is nothing to set up by hand.

AmneziaWG vs WireGuard

AmneziaWG
WireGuard
Cryptography
Noise + ChaCha20-Poly1305, unchanged
Noise + ChaCha20-Poly1305
Speed and battery
WireGuard-class, negligible padding overhead
Reference baseline
Handshake signature
Masked with junk packets
Fixed and recognizable
Packet-size profile
Tunable padding — blends with encrypted web traffic
Predictable pattern
Stability on restrictive networks
Holds steady
May throttle or drop

When to choose AmneziaWG

WireGuard speed without the fragility

RunVPN runs AmneziaWG alongside VLESS-Reality and picks the best option for your network automatically. Download the app and connect in one tap.

احصل عليه منGoogle Play App StoreiOS قريبًا
FAQ

الأسئلة الشائعة

Is AmneziaWG slower than WireGuard?+

In normal conditions the speed is effectively the same — the cryptography and core design are identical. The extra padding adds a negligible amount of overhead in exchange for far better stability on tricky networks.

Is it still based on WireGuard's cryptography?+

Yes. AmneziaWG inherits WireGuard's modern key exchange and cipher suite unchanged. Only the handshake signature and the packet profile are adjusted.

Do I need to configure AmneziaWG myself?+

No. After you sign in, the RunVPN app fetches its configuration and picks the right protocol automatically. There is nothing to set up by hand.

Will I get AmneziaWG or VLESS-Reality when I connect?+

The app decides based on your network. Where UDP is reliable, AmneziaWG delivers the best speed; where UDP is throttled or filtered, the app switches to VLESS-Reality over TCP for a stable connection.

تابع القراءة