wg-over-tun2socks

So let's say you want to connect via Wireguard to a server, but you want this server to actually tunnel all traffic via VLESS or any other Xray-compatible protocol.

I wanted it too and spend some time figuring out how.

Instructions

Prerequisites

1. You need to have a server A with docker installed.
2. You need to have a server B with running xray instance. I recommend Marzban.

Setup

1. in config.json enter the IP-address of the server B in the placeholder (domain name will not work)
2. in config.json enter ID of your VLESS connection (it's the credentials that let you be authenticated in VLESS)
3. make sure every other field coressponds to your VLESS configuration. Mine is default for Marzban. You basically can provide any valid xray config, it's up to you.
4. in docker-compose.yml populate env variables with your Wireguard address (server A's public IP) and your VLESS IP-address (server B's public IP)
5. you can also use other env variables, everything that's compatible with wg-easy

Note

Everything is configured in the way that your default interface is assumed as eth0. If it's not then change the source code of start.sh by replacing eth0 with your interface. You can see your interfaces by calling ip a. Find there the inteface that actually serves internet connection, usually it has your NAT IP address and the gateway IP.

Run

Execute docker-compose up -d. If everything is correct you should be able to use wg-easy frontend and every connection will be run via VLESS tunnel.