Ithy - Ithy

Yes, enabling the AmneziaWG protocol on an already deployed AmneziaVPN self-hosted server requires specific steps. While AmneziaWG is based on WireGuard, it includes additional obfuscation features, and its setup involves more than just switching protocols. Here's a comprehensive guide:

Compatibility and Prerequisites

Before proceeding, ensure your server meets these requirements:

Operating System: Linux (Ubuntu 22.04 or Debian 11/12 are recommended).
Processor Architecture: x86-64.
Virtualization: KVM.
IPv4 Address: Required for server communication.
RAM: At least 1 GB (2 GB recommended). Note that limited RAM may restrict available protocols.
Kernel Version: Ensure your kernel is version 5.6 or higher.
AmneziaVPN Version: Use the latest version of AmneziaVPN. Check with amnezia --version.

Verify your server details by connecting via SSH:

ssh user@your-server-ip -p port-number

Then, check your OS version, RAM, and virtualization:

lsb_release -a
free -h
systemd-detect-virt

Ensure your system is up-to-date:

sudo apt update
sudo apt upgrade -y

Installation of AmneziaWG

AmneziaWG is based on WireGuard but includes enhanced obfuscation. Here are the steps to install it:

Install Required Packages:
```
sudo apt install -y wireguard-tools git
```

Clone the AmneziaWG Repository:

git clone https://github.com/Amnezia-vpn/amnezia-wg.git
cd amnezia-wg

Run the Installation Script:
```
sudo bash install.sh
```
This script handles the installation of necessary drivers and configurations.

Allow traffic routing:

sudo sysctl -w net.ipv4.ip_forward=1
sudo sysctl -w net.ipv6.conf.all.forwarding=1

Reboot your system to apply changes:

sudo reboot

Configuration of AmneziaWG

After installation, generate the main AmneziaWG configuration files:

Create a New Directory:
```
sudo mkdir /etc/amnezia-wg
```
Generate the Main AWG Config:
```
sudo bash generate-config.sh
```
Generate Client Configs:
```
sudo bash generate-client-configs.sh
```
Add New Clients:
Edit the main configuration file to add new clients:
```
sudo nano /etc/amnezia-wg/config.yaml
```
Generate Client Configs and QR Codes:
```
sudo bash generate-client-configs.sh
```

Start the AmneziaWG tunnel interface:

sudo wg-quick up amnezia-wg

Check the status:

sudo wg show

Alternative Configuration Method

Alternatively, you can enable AmneziaWG by modifying the AmneziaVPN configuration directly:

Navigate to the AmneziaVPN Installation Directory:
```
cd /opt/amnezia
```
Open the Protocol Configuration File:
```
nano /opt/amnezia/config/protocols.json
```
Add or Modify the AmneziaWG Block:
If it doesn't exist, add the following block:
```
{
    "protocol": "AmneziaWG",
    "enabled": true,
    "port": 51820,
    "obfuscation": true
}
```
- port: The UDP port used by AmneziaWG. Ensure this port is open in your firewall.
- obfuscation: Set to true to enable traffic obfuscation.
Save and Exit the File.
Restart AmneziaVPN Services:
```
systemctl restart amnezia
```
Check the Status:
```
systemctl status amnezia
```

Firewall Configuration

Ensure the necessary ports are open in your firewall. AmneziaWG typically uses UDP port 51820.

Check existing rules:

ufw status

Allow UDP traffic on port 51820:

ufw allow 51820/udp

Reload firewall rules:

ufw reload

Connecting Clients

Copy Client Configs:

scp /etc/amnezia-wg/client-configs/my_amneziawg_client1.conf user@client-machine:/path/to/config

Connect to AmneziaWG:
On your client machine, use the WireGuard client to connect to the AmneziaWG server:
```
wg-quick up my_amneziawg_client1
```

Alternatively, you can generate a configuration file or QR code from the AmneziaVPN client, then import it on your device.

Verifying AmneziaWG Functionality

To confirm AmneziaWG is working correctly:

Check server logs:
```
journalctl -u amnezia
```
Look for entries indicating successful connections.
Verify traffic obfuscation using a DPI testing tool.

Additional Notes

Troubleshooting: If the connection fails, check server logs and firewall rules.
Updating AmneziaVPN: Keep AmneziaVPN updated:
```
apt update && apt install amnezia -y
```
Manual Protocol Configuration: If needed, you can configure the VPN protocol manually during the setup process.

Summary

Enabling the AmneziaWG protocol on your self-hosted AmneziaVPN server involves ensuring compatibility, installing necessary packages, configuring the protocol, and setting up client connections. This process ensures a secure and obfuscated VPN connection.

For further assistance, consult the Amnezia Documentation.