4 ms·
It is worth noting that not all implementations of multihop are the same. For example, if multihop is using a dedicated port on the entry node (e.g. connecting
by madars 3y ago
It is worth noting that not all implementations of multihop are the same. For example, if multihop is using a dedicated port on the entry node (e.g. connecting to any Mullvad server on port 3438 will give you a multihop through that server to se-sto-wg-001), someone can who observe your traffic to the entry server (e.g., your ISP) can immediately figure out the exit server because entry port<->exit server mapping is public. Double-tunneling (i.e. having a VPN connection inside an outer VPN connection) doesn't have the same problem but reduces MTU.
- fruitreunion1 3y agoThe mullvad app does multihop in a more secure way than what their help page says for manual wireguard, but it's not documented anywhere else so you have to read the source code of the app. I wish they would make that more clear or add documentation for the more secure way.