Blokada integrates with Cloudflare's BoringTun and that looks pretty straight-forward.
Wireguard's official cross-platform implementation is in golang (being rewritten in Rust?) and so the integration could be relatively simpler than with BoringTun.
The traffic would probably go from app -> vpn-tun -> tun2socks -> wireguard. Wasteful?
May be, the entire firewall and DoH implementation can be moved into wireguard instead?
See also: #45 and #37
Blokada integrates with Cloudflare's BoringTun and that looks pretty straight-forward.
Wireguard's official cross-platform implementation is in golang (being rewritten in Rust?) and so the integration could be relatively simpler than with BoringTun.
The traffic would probably go from app -> vpn-tun -> tun2socks -> wireguard. Wasteful?
May be, the entire firewall and DoH implementation can be moved into wireguard instead?
See also: #45 and #37