Wireguard VPN

Wireguard VPN so far penetrates the Great FireWall for me quite reliably. (I am currently using the Digital Ocean data center in Singapore.)

Easily provision / reprovision a temporary Wireguard service on a cloud server using Algo:

https://github.com/trailofbits/algo/

If you are using Digital Ocean, very easily turn your VPN server on (less than one cent per hour, max five dollars per month) and off (costs almost nothing to hold in a standby "off" state) using the "DO Swimmer" app off of Fdroid:

https://f-droid.org/en/packages/com.yassirh.digitalocean/

To use WireGuard on Android, install the WireGuard app

https://f-droid.org/en/packages/com.wireguard.android/

and simply scan the server-specific QR code provided by Algo. To use WireGuard on Debian unstable,

apt-get install wireguard wireguard-dkms wireguard-tools

Then grab the debian.conf (or whatever you called it) config file from Algo and copy it to (for instance)

/etc/wireguard/wg0.conf

Turn on your Debian wireguard VPN (as root) with

wg-quick up wg0

and observe the wg0 interface in ifconfig output. wg-quick automatically sets up a default route to the wg0 connection.

WireGuard is coming soon to the Qubes kernel, test for kernel readiness in Qubes with:

ip link add dev wg0 type wireguard