协议的安装和配置

Amnezia is a multi-protocols self-hosted VPN. It supports configuration and installation of all modern secure open source VPN protocols: OpenVPN, WireGuard, ShadowSocks, IKv2/IPsec and OpenVPN with Cloak plugin. A more detailed description of the protocols can be found in this article, and below we will tell you how to install and configure VPN protocols with Amnezia in two clicks.  

Open the Amnezia home screen

On the main screen, click on the server name.

Click the gear icon to the right of the server name.

Click on the "Protocols" tab. Select the protocol you want to set.

If the protocol is already installed, the icon next to the protocol will change to an arrow.

In this case, if you click on the name of the protocol, you will get to its settings menu.

Setting up OpenVPN over Cloak

It consists of configuring the Cloak plugin and configuring the OpenVPN protocol.

Configuring OpenVPN

The OpenVPN protocol is very flexible for customization.
You can change the subnet address in it.
Network protocol,
Port,
Select the encryption method for the code and hash,
TLS-auth adds another HMAC signature to SSL/TLS handshake packets, initiating additional packet integrity checking. A packet without a signature will not be processed. This will provide an additional layer of security to the SSL/TLS protocol, protecting the system from some types of attacks.
 Block DNS request outside of VPN - prevents your DNS server address from being leaked.

In the settings of the Cloak plugin and the X-Ray reality settings, you can change the encryption and port, as well as select camouflage for the traffic.

You can enter any website into this field, and when attempting to detect and intercept VPN traffic by DPI analysis systems, only this camouflage will be displayed instead of VPN traffic.

It's important that this is a foreign website that is accessible from your country without a VPN. In rare cases, the website owners may report phishing to your provider, so it's recommended to choose the site carefully.

In the ShadowSocks settings, you can change the encryption method and port.

In the AmneziaWG settings, you can change the "Magic" headers and "Junk" packet sizes.