WG Tunnel

🔐 WG Tunnel — Advanced WireGuard & AmneziaWG Client

WG Tunnel is an open-source Android VPN client built around WireGuard and AmneziaWG. Inspired by the official WireGuard Android application, it adds advanced tunnel automation, flexible routing, connection monitoring, lockdown protection, and local proxy functionality for users who need greater control over their VPN connections.

🌐 WireGuard & AmneziaWG Support

WG Tunnel supports modern VPN tunneling with additional options for networks where standard WireGuard connections may be restricted.

• Import and manage WireGuard configuration files • Support for AmneziaWG, including versions 2.0 through 3.1 • Monitor tunnel handshakes and connection health • Automatically resolve endpoints and update peers during tunnel startup • Handle changing server IP addresses and IPv4/IPv6 endpoint selection

AmneziaWG adds configurable traffic obfuscation features intended to help in some DPI-restricted network environments.

📥 Tunnel Management & Configuration

Create and manage VPN tunnels using several convenient methods.

• Import ".conf" files and supported configuration archives • Add tunnels through manual entry, clipboard, or QR code where supported • Organize and activate configured tunnels from the application • Export tunnel configurations for backup or transfer • Manage peer and endpoint settings through compatible WireGuard and AmneziaWG profiles

🎯 Auto-Tunneling & Split Tunneling

Automate VPN connections according to your device's network conditions.

• Automatically activate tunnels based on Wi-Fi network details • Configure behavior for mobile data and Ethernet connections • Select specific applications to include in or exclude from the VPN • Restart or recover tunnels when supported health checks fail • Use automation integrations to control tunnels without opening the application

🔒 Lockdown & Leak Protection

Lockdown mode acts as an in-app kill switch, blocking network traffic while the tunnel is down, with configurable options such as LAN bypass.

• Reduce the risk of traffic escaping outside the VPN • Apply lockdown behavior when a connection becomes unavailable • Use deferred endpoint resolution to improve startup reliability • Monitor tunnel handshakes for connection-health feedback

Protection depends on Android's networking behavior, selected settings, and device compatibility. No configuration guarantees protection against every possible leak.

🔗 Local Proxy Mode

Expose a configured tunnel through a local proxy endpoint for compatible applications.

• SOCKS5 proxy support • HTTP proxy support • Use supported browsers and firewall applications with the local proxy • Route compatible application traffic through an existing VPN tunnel

Local proxy mode is useful when an application needs proxy access rather than Android's system-wide VPN interface.

⚙️ DNS & Network Controls

WG Tunnel provides additional controls for DNS resolution and network behavior.

• Plain DNS, DNS over TLS (DoT), and DNS over HTTPS (DoH) • Split DNS routing based on domain suffixes • Dynamic endpoint updates when server addresses change • IPv6 endpoint upgrades with IPv4 fallback when supported • Quick Settings tiles, home-screen shortcuts, and automation intents

📺 Android & Device Compatibility

Designed for Android phones, tablets and Android TV. Available features may vary by device and configuration. Standard Android VPN mode does not require root access.

📜 License

WG Tunnel is released under the MIT License. The project uses WireGuard, AmneziaWG, and other components that retain their respective licenses and notices.

⚠️ Important

WG Tunnel is a VPN client, not a VPN service provider. It does not supply VPN servers or subscriptions. You must provide compatible configurations, and connection quality and security depend on your server, network and settings.

✨ Automate your VPN, manage WireGuard and AmneziaWG tunnels, and take greater control of your Android network.