Hi all,
I’m looking for a GUI way to utilize a VPN over TLS. I can host whatever backend VPN is needed to tunnel through, Wireguard, OpenVPN, SSH, anything. My goal is to have the VPN travel over port 443 as TLS traffic and still be able to use the native android blocks for when the VPN is not active. I currently use Wireguard, but need to convert to a TLS solution.
So far the most promising and up-to-date I’ve found is WSTunnel: https://github.com/erebe/wstunnel with this guide from Hetzner: https://community.hetzner.com/tutorials/obfuscating-wireguard-using-wstunnel, however this requires me to run a command line app in Termux and then the WG client on top of that, vs having a full GUI option. I’ll go down this path if I need to, but want to make sure I’m not missing something.
Thanks!


Welcome to the Android community on Lemmy. Here you can participate in amazing discussions and events relating to all things Android.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
1. All posts must be relevant to Android devices/operating system.
2. Posts cannot be illegal or NSFW material.
3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.
4. Non-whitelisted bots will be banned.
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Community Resources:
It’s possible that Tailscale (SaaS) or Headscale (completely oss and self-hosted) work for you. This is a vpn based on the wireguard protocol with additional magic. While TS will always attempt to create a wireguard tunnel over udp, it can fall back to HTTPS if otherwise the connection cannot be established. If your motivation is to work from a network where only TLS is permitted this could do.
Tailscale has an Android client. GUI.