Who it’s for
VK TURN Proxy is for users whose ISP or network operator blocks WireGuard UDP but permits WebRTC traffic. Because it reuses the TURN infrastructure of existing, high-traffic video-calling services, it requires no dedicated relay server beyond the VPS running your WireGuard server.Key features
- DTLS 1.2 obfuscation — WireGuard packets are encrypted inside DTLS 1.2 using
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256before reaching the TURN server, making them indistinguishable from WebRTC media to a passive observer. - Parallel TURN connections — The client opens up to 16 simultaneous TURN channels by default (VK) to maximise throughput. You can tune this with the
-nflag. - Automatic credential extraction — You provide a call link; the client fetches short-lived TURN credentials automatically. No manual registration or API keys required.
- TCP and UDP transport — Connect to the TURN server over TCP (default) or switch to UDP with
-udpfor environments where TCP is throttled. - Cross-platform — Native binaries for Linux, Windows, macOS, and Android (via Termux or the dedicated Android app).
Supported providers
| Provider | Link format | Status |
|---|---|---|
| VK Calls | https://vk.com/call/join/<id> | Active |
| Yandex Telemost | https://telemost.yandex.ru/j/<id> | Closed (Telemost shut down) |
Next steps
How it works
Understand the DTLS and TURN tunneling architecture before you deploy.
Prerequisites
Everything you need on both the server and client before you start.