

In addition, we can also enable the Kill-Switch to prevent data leaks if the VPN goes down. Other interesting features are that it allows roaming between networks quickly and easily, to always be connected from any WiFi or 4G / LTE network without interrupting the connection. Of course, the WireGuard server can be behind the NAT without problems, only a port forwarding would have to be done.

With this new VPN we will not need to manage the connections or make difficult configurations, it only works in tunneling mode because it is an 元 VPN, and uses the UDP protocol as a transport layer and does not allow selecting TCP, what we can do is modify the port of listen for whoever we want. As you have seen, we have the most modern cryptographic algorithms used by default, and we cannot change it for others at the moment, they must be these yes or yes. It also makes use of Curve25519 for ECDH, BLAKE2 for hashing, SipHash24 for hashtable keys, and HKDF for key derivation. Regarding the cryptography used, we have ChaCha20 for symmetric encryption, authenticated with Poly1305, so we have AEAD.
