How to run it
- You need a server with a public IP: a VPS, a MikroTik router with a public address, or an office server with the UDP port forwarded.
- Paste the server config and start WireGuard. On MikroTik, paste the commands into the WinBox terminal.
- Scan the QR code in the WireGuard app on the phone; import the .conf on a computer.
- Check that the UDP port is open and handshakes happen: wg show prints the latest handshake time.
If it does not connect
- No handshake: the UDP port is closed at the server or ISP, the Endpoint is wrong, or keys are swapped.
- Handshake but no internet: forwarding (ip_forward) and NAT are off on the server, or the WAN interface is wrong.
- Some sites half-load: lower the MTU to 1380 or 1280, especially on mobile data and PPPoE.
To see which address sites see once connected, and whether WebRTC leaks, open What is my IP. Measure the tunnel with the speed test.