DPI-proof private VPN options for an rPi?

I’ve got some Pi 3’s and newer laying around and wanted to upgrade from my somewhat new Wireguard setup on PiVPN and move to something that can essentially operate in plain sight (eg. open ports like 443, etc) and pass DPI (I presume via encryption).

What are my options? And do those options play well with Windows, iPadOS, Android and OpenWrt (GliNet Beryl AX travel router)? Right now I’m just running the WireGuard client on all my mobile devices.

Your best bet is to follow GitHub - SasukeFreestyle/XTLS-Iran-Reality: Xray-core (V2ray) Server with Reality Protocol for bypassing internet censorship in Iran.

You can spoof the TLS SNI to any website and make it appear you’re making an authentic tls connection to that website

Yes! Obfuscation is the term I was looking for, yet somehow escaped me despite searching for it previously.

The “introductory” goal here is to defeat a possible block on certain kinds of traffic from a cruise ship, however the idea got me intrigued to set it up as a backup option in general just in case something like a simple WG connection won’t do the trick in the future.