PrivateKey is hidden in the preview. Download and copy give the full config.

Загрузка...

No saved generations

AWG 1.5 Legacy

Static obfuscation parameters (Jc, S1–S4, H1–H4)
Masks only the start of the connection
Works with Cloudflare WARP without a server
Compatible with older clients

AWG 2.0 client config

Dynamic headers + random padding in all packets
Mimics QUIC/DNS throughout the entire session
Harder to detect with heuristic DPI analysis
Requires client ≥ 4.8.12.9 (Amnezia)

AWG 3.0 WARP-safe

Timing randomization and a PersistentKeepalive range
Client-side mechanisms only — the Cloudflare peer stays standard
Requires a client that supports AWG 3.x parameters

AWG 3.1 WARP-safe

Everything in AWG 3.0 plus new 3.1 client features
AmneziaVPN 5.0.1.5+ or a compatible AWG 3.1 client is recommended
If import fails, choose AWG 2.0

Routes and AllowedIPs

By default, all traffic goes through the tunnel (AllowedIPs = 0.0.0.0/0). In settings (step 2) you can choose a DNS server and presets — only the required IPv4 subnets will be routed through the tunnel. IPv6 can be enabled optionally, but it increases the route count 2–3× and may cause issues on routers and mobile clients. Safe limit — 1000 IPv4 CIDR.

IP ranges can be replaced manually. Up-to-date lists at opencck.org and rockblack.pro.

Is a server required for AWG 2.0?

For Cloudflare WARP — no. Configs from this generator work with Cloudflare's public server without any server-side configuration.

For your own server — yes. Self-hosted AWG 2.0 requires an updated kernel/module amneziawg-linux-kernel-module on the server and new client configs (old AWG 1.5 configs become incompatible). See the official documentation for details.

Clients

WindowsAmneziaWG — GitHub releases; import the .conf.
AndroidAmneziaVPN or AmneziaWG — amnezia.org; .conf or vpn://.
iOSAmneziaVPN or AmneziaWG from the App Store — amnezia.org.
RoutersKeenetic, OpenWrt, MikroTik, GL.iNet — turn on "Router mode" in settings.

Install and import

Download and install AmneziaWG:
Follow the download link and get the installer for Windows. Install to the default path "C:\Program Files\...".
Generate and import the config file:
Choose AWG 1.5, 2.0, 3.0, or 3.1 according to client support. AWG 3.x uses a WARP-safe client profile; AWG 3.1 is recommended with AmneziaVPN 5.0.1.5+ or a compatible client. Download the configuration and import the .conf file into the client.

After importing, enable the tunnel in the client. The client restores its state when Windows starts.

What is this?

The generator creates a ready AmneziaWG/WARP profile for import into a VPN client. You can download a .conf file or copy vpn:// if your client supports quick import. Full tunnel routes all supported traffic through WARP, while split tunnel routes only selected destinations. Connectivity depends on the client, network, endpoint, DNS, and routes.

The generator reduces manual configuration, but it does not guarantee connectivity in every network or client.

What is AmneziaWG and how is it different from WireGuard?

AmneziaWG (often written as "Amnezia WG") is a WireGuard fork by the Amnezia team. Encryption and keys are the same as in WireGuard, but the protocol adds obfuscation: junk packets before the handshake (Jc, Jmin, Jmax), CPS imitation packets (I1–I5) and, from AWG 2.0 on, header and padding parameters. This makes AmneziaWG traffic harder to identify by the WireGuard signature.

What is Cloudflare WARP and do I need my own server?

WARP is a free Cloudflare service built on WireGuard. The generator registers a new device through the official WARP API and builds a ready config from the result, so no server of your own is needed. The Cloudflare server stays a standard WireGuard peer, which is why some AmneziaWG parameters are intentionally fixed for it: S1–S4 = 0, H1–H4 = 1–4, MTU 1280.

Which profile should I choose: AWG 1.5, 2.0, 3.0 or 3.1?

Start with AWG 2.0: it is the default and imports into current AmneziaWG and AmneziaVPN. AWG 1.5 is for older clients. AWG 3.0 and 3.1 add client-side features of newer versions such as timing randomization; 3.1 needs AmneziaVPN 5.0.1.5+ or a compatible client. If the import fails, go back to AWG 2.0.

How do I import the config into AmneziaWG or AmneziaVPN?

On Windows, install the AmneziaWG client and add a tunnel from the downloaded .conf file. On Android and iOS, use AmneziaVPN or AmneziaWG: import the .conf file or paste the vpn:// link if it is available for the chosen profile. For routers (Keenetic, OpenWrt, MikroTik, GL.iNet), turn on "Router mode" in settings before generating.

The config imports but does not connect. What should I do?

Try another UDP port (2408, 500, 1701) and an endpoint IP address instead of the hostname — both are in the settings of step 2. On mobile networks, turn on the mobile profile. Make sure your client version supports the chosen AWG profile. If it connects but sites do not open, check DNS and routes. The current service state is on the Status page.

Is it free? What happens to the keys?

The generator is free and needs no sign-up. Keys are created during generation and handed straight to you — the server does not store them. Generation history is kept only in your browser and can be cleared. The source code is open under the AGPL-3.0 license.

Can I route only some sites through WARP?

Yes. In settings, choose split routing and tick the services you need: only their IPv4 subnets go into AllowedIPs, and other traffic goes directly. To keep the config reliable on phones and routers, the generator limits the list to 1000 IPv4 subnets.

Where do I download AmneziaWG and AmneziaVPN?

The generator only creates the config; the client is installed separately. AmneziaWG for Windows is on the GitHub releases page. AmneziaVPN and the mobile apps are on the official amnezia.org downloads page. Download clients only from official sources.

What is an AmneziaWG tunnel and where do I get one?

The AmneziaWG client calls a connection profile a tunnel, and the .conf file from this site is exactly that: it holds the keys, address, DNS, obfuscation parameters and the Cloudflare WARP server. Click "Generate config", download the file and choose "Add Tunnel" → import from file in the client. Every generation creates a new tunnel with its own keys.

How is AmneziaWG different from AmneziaVPN?

AmneziaWG is the protocol and a lightweight client for it alone: it imports .conf files. AmneziaVPN is an app by the same team with several protocols, AmneziaWG included; besides .conf it accepts vpn:// links. A config from this site works in both clients if they support the chosen AWG profile.

The awgconfig.com server registers a Cloudflare WARP device for you and immediately returns the finished config. Keys and configs are not stored on the server; only technical errors reach the logs.

Generation history is kept only in this browser (localStorage) — you can clear it in the History window.

Analytics: Yandex Metrica without Webvisor plus anonymous product events (mode, generation outcome). Keys, endpoint addresses and config contents are never sent to analytics.

Third-party services: Cloudflare (WARP registration) and iplist.opencck.org (route lists for split tunnelling).

AmneziaWG Config Generator is an unofficial open-source project. It is not affiliated with Cloudflare or the Amnezia team; names belong to their owners.

The service is provided "as is", without warranties. Whether the tunnel works depends on the client, network, ISP and endpoint and is not guaranteed on every network.

Use of Cloudflare WARP is governed by Cloudflare's terms. You are responsible for complying with the laws of your country.

3.0.2 Lab by default, iPhone dialogs and the compatibility card7 Oct 2026
3.0.1 Texts after the update, the Lab page and the status dialog7 Oct 2026
3.0.0 Endpoint Lab, Lab Auto mode and the new design7 Oct 2026

Full changelog

Discussion of clients, endpoints and network issues.

Open Telegram

Project GitHub

AmneziaWG config generator for Cloudflare WARP

Choose a profile

Adjust parameters (optional)

Config is ready!

Compatibility

Works

Uncertain