AmneziaWG
tunelly is a client. An AmneziaWG profile is a WireGuard
profile with extra interface fields. Paste the file or a
wireguard:// link that carries them. The app
handshakes with that peer. We operate no servers and sell no
access.
What the extra fields are
Junk-packet counts and the header sizes the peer expects. When the file has them, they are passed through. When it does not, the handshake is plain WireGuard — and a peer that accepts AmneziaWG also accepts a client that sends none of this.
The rest of the profile is the same as WireGuard: private key, public key, endpoint, optional preshared key, AllowedIPs as the traffic split, DNS from the file.
What is not carried
Non-zero reserved bytes (the WARP shape) are refused. They sit on the packet before this engine's handshake applies. A tunnel built without them would reach a peer listening for something else. The app names the feature and stops.
Putting it in the app
Paste the whole file. The add screen reads a
[Interface] block as one record, not line by line.
How to add a configuration covers the
clipboard and a link that does not open the app.