WireGuard + HTTP Proxy Tunnel Setup for iPhone (with DNS Leak Protection)

Project Description:

I’m looking for an experienced Linux server and networking professional to configure a secure WireGuard + HTTP Proxy tunnel for my iPhone.
The goal is to ensure that all iPhone traffic is routed through a WireGuard VPN, which then forwards all TCP traffic through an authenticated HTTP proxy. The setup must guarantee privacy, IP consistency, DNS leak protection, and stable operation.

⸻

Technical Requirements:

1. Server & VPN Setup
• Install and configure WireGuard on an Ubuntu 22.04 VPS (root access will be provided).
• Generate iPhone-compatible WireGuard configuration with QR code.
• Optimize MTU and firewall rules for stability.

2. Proxy Integration
• Route all TCP traffic through an authenticated HTTP proxy (credentials provided).
• Use either sing-box (TPROXY) or 3proxy (REDIRECT) depending on your expertise and performance considerations.

3. Security & DNS Leak Protection
• Implement kill-switch using iptables/nftables to block any direct traffic leaks.
• Force all DNS resolution through the proxy to prevent leaks.
• Block non-routed protocols (e.g., QUIC).
• Test the setup using tools like dnsleaktest.com and whatismyipaddress.com.

4. Automation & Persistence
• Configure services to auto-start with systemd after reboot.
• Provide brief documentation on changing proxy credentials and managing the setup.

5. Testing & Delivery
• Deliver a fully tested setup working on iPhone with the WireGuard app.
• Ensure DNS/IP leak tests pass successfully.

⸻

What I Will Provide:
• VPS IP & root access (Ubuntu 22.04)
• Proxy credentials (host, port, user, password)

⸻

Required Skills:
• Strong experience with WireGuard on Linux
• Knowledge of HTTP proxies (sing-box or 3proxy)
• iptables / nftables firewall configuration
• DNS leak prevention and kill-switch implementation
• Clear communication and documentation