WireSock Secure Connect
Document version: 2.0 (2025‑07‑27)
What is WireSock Secure Connect?
WireSock Secure Connect (WSSC) is a high‑performance Windows VPN client that implements the WireGuard® protocol entirely in user space via the Windows Packet Filter (WinPkFilter) driver. It adds per‑application selective tunnelling and an anti‑censorship layer (AmneziaWG) while remaining fully compatible with any standard WireGuard server.
Supported Platforms ✅
Currently Wiresock Secure Connect works only on Windows. We have plans to support other platforms: Linux, macOS and mobile application (Android & iOS) in the future, but there are no specific timelines yet.
Available, has versions for:
- Windows 7 (x86, x64)
- Windows 8.1 (x86, x64)
- Windows 10 (x86, x64)
- Windows 11 (x86, x64, Arm64)
Not available, has no versions for:
- Wiresock Secure Connect is not available for Linux or macOS*
- Wiresock Secure Connect is not available for mobile platforms (iOS or Android)
Supported VPN Protocols ✅
| Protocol | Transport | Notes |
|---|---|---|
| WireGuard | UDP (native) | RFC‑compliant implementation using BoringTun |
| AmneziaWG | UDP | Obfuscation layer that disguises WireGuard traffic to bypass DPI |
| WireGuard‑over‑SOCKS5 | UDP (handshake via SOCKS5) | Initial handshake proxied through a user‑supplied SOCKS5 server |
WSSC does not support OpenVPN, IPSec/IKEv2, L2TP, or WireGuard‑over‑QUIC/TCP.
Key Features ✅
- Reduced VPN Detectability — junk‑packet padding, AmneziaWG stealth mode, and SOCKS5‑proxied handshake to evade DPI.
- User‑level (adapterless) tunnel activation — start and manage tunnels without admin privileges.
- Transparent & Virtual Adapter modes — choose between zero‑footprint transparent mode or a dedicated virtual adapter, depending on your workflow.
- Selective application tunnelling — route only chosen apps through the VPN for precise traffic control.
- Intelligent IP routing — include or exclude specific subnets to keep unwanted routes out of the tunnel.
- High‑speed connectivity — user‑space performance on par with kernel‑mode implementations, ideal for streaming, gaming, and video calls.
- Ultra‑lightweight footprint — ~1.5 MB CLI (≤10 MB RAM) and 7.2 MB with built‑in GUI.
- Windows Mobile Hotspot compatibility — share your VPN connection via the Windows 10/11 Mobile Hotspot feature.
- Backup tunnel configuration — automatic failover to a secondary WireGuard setup if the primary tunnel drops.
Support & Resources ✅
| Channel | Link |
|---|---|
| Contact form | https://www.wiresock.net/about/contacts |
| Website | https://www.wiresock.net |
| Documentation | https://wiresock.net/documentation/ |
| GitHub | https://github.com/wiresock |
| Telegram | https://t.me/wiresock |
| Discord | https://discord.gg/hMNttJ7CMX |
| YouTube | https://www.youtube.com/@WireSock/videos |
Glossary
- AmneziaWG – Obfuscation layer randomising WireGuard packets.
- BoringTun – Userspace WireGuard implementation by Cloudflare.
- DPI – Deep Packet Inspection.
- WinPkFilter – Kernel‑mode packet filter driver for Windows.
- WireGuard – Modern, high‑performance VPN protocol using ChaCha20‑Poly1305 and Curve25519.
© 2025 NT KERNEL. “WireGuard” is a registered trademark of Jason A. Donenfeld. WireSock Secure Connect is not affiliated with WireGuard LLC.