nat-traversal-github-actions-openvpn-wireguard
wgsd
| nat-traversal-github-actions-openvpn-wireguard | wgsd | |
|---|---|---|
| 5 | 8 | |
| 182 | 769 | |
| - | - | |
| 0.0 | 2.8 | |
| about 1 year ago | 5 months ago | |
| Shell | Go | |
| - | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
nat-traversal-github-actions-openvpn-wireguard
- OpenVPN and WireGuard server on GitHub Actions: representative NAT traversal
- OpenVPN & WireGuard server at GitHub Actions: representative NAT traversal case
- OpenVPN and WireGuard server on GitHub Actions: representative NAT traversal case
- nat-traversal-github-actions-openvpn-wireguard: OpenVPN and WireGuard server on GitHub Actions: representative NAT traversal case
- OpenVPN and WireGuard server GitHub Actions: representative NAT traversal case
wgsd
-
Mesh VPN - WireGuard admin
if your looking at setting up coredns aswell then i would highly suggest checking out wgsd https://github.com/jwhited/wgsd
- DNS System for storing WireGuard IPs
-
CVE-2022-41924 – tailscaled can be used to remotely execute code
https://github.com/jwhited/wgsd does NAT traversal with Wireguard, but you need to operate a CoreDNS server to do it.
More info on how it works: https://www.jordanwhited.com/posts/wireguard-endpoint-discov...
-
For CGNAT peers - is there an alternative which is open source and as simple to use as Tailscale?
Another one which looks promising is wgsd, a dns like plugin to discover peer's endpoints that sit behind a NAT. For me this is part of the solution, however not a complete one, as my client devices are also on Android and Android TV.
-
Wireguard with holepunching and DNS
that guide is literally someone promoting their CoreDNS plugin, so I'm confused as to what you mean: https://github.com/jwhited/wgsd
- Wiretrustee: WireGuard-Based Mesh Network
-
traceroute between two clients, server is always in the middle
If they are behind a NAT that you can't do port-forwarding on then you may need to run some additional software like https://github.com/jwhited/wgsd so 10.10.0.2 and 10.10.0.3 know where to look for each other by asking 10.10.0.1
-
Yet Another Mesh Overlay Tool
Our current implementation just has the nodes configured with PersistentKeepAlive by default, which works well enough for our small setup. In future iterations our plan is to incorporate another service. Our inclination is to use WGSD: https://github.com/jwhited/wgsd
What are some alternatives?
alpine-qbittorrentvpn - Multiarch docker image with the latest qBittorrent-nox client (WEB UI) and WireGuard/OpenVPN tunnel
Netmaker - Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
nordvpn - NordVpn Docker Client
headscale - An open source, self-hosted implementation of the Tailscale control server
wireguard-install - WireGuard VPN installer for Linux servers
innernet - A private network system that uses WireGuard under the hood.
streisand - Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
netbird - Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.
wireguard-docs - 📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.
cjdns - An encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing.
wireproxy - Wireguard client that exposes itself as a socks5 proxy
dsnet - FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.