Earlier quoted context omitted.
I have WireGuard endpoints of UDP 53, 443 and a high random port - at least one of them tends to work (although not always — one hotel recently only allowed tcp/80 and tcp/443
> one hotel recently only allowed tcp/80 and tcp/443 How did DNS resolution work? Do they force you to use their proxy server?
They could set up a recursive dnsmasq on the router, and block udp/53 traffic to the outside world.