spn VS boringtun

Port forwarding on router without the use of a VPN is not what I was talking about dude. Linux has always had the ability to route iptables and software like Portmaster SPN, have paced the way for granular control at the packet level. So before you respond, take a look at the protocol of Portmaster SPN and consider what I’m saying, I’m trying to help you bro, not fight. https://safing.io/spn/

Safing develops the privacy firewall „Portmaster“ and runs the „Safing Privacy Network“ (SPN) which joins features of Onion Routing and VPN. The company has a transparent business model and the code is open source. We are an official reseller of Portmaster Unlimited.

If you're up to trying something new, we've built a technology to replace consumer privacy VPNs: https://safing.io/spn/

Technical summary of the SPN (Safing Privacy Network):

- A Privacy Network aimed at use cases "between" VPN and Tor.

- Uses onion encryption over multiple hops just like Tor.

- Routes are chosen to cover most distance within the network to increase privacy.

- Exits are chosen near the destination server. This automatically geo-unblocks in many cases.

- Exclude apps and domains/entities from using SPN.

- Change routing algorithm and focus per app.

- Nodes are hosted by Safing (company behind Portmaster) and the community.

- Speeds are pretty decent (>100MBit/s).

I have been messing around trying to make a secure browsing instance that has a few browsers and some VPN clients like Proton VPN and and Portmaster by Safing and after going through a long path of errors and wrappers written in Python i think the issue stopping these tools from running properly is accessing the hosts network from the container. Looking at these stack overflow questions lead me to this conclusion: nmcli in a docker container Enabling network manager inside docker

but SPN is open source as well

There is really so much. Check their website. They do a better a jop at that : https://safing.io/spn/

I read their info and tutorials. Honestly I don't put completely my trust in the onion routing system. Does anyone use this software and can give a balanced opinion on speed, usage, problems, and overall quality of service? https://safing.io/spn/

There are 3 big parts:

- The firewall itself with rules, filter lists, and so on - https://safing.io/features/

- Secure DNS (DoT/DoH resolver) - https://safing.io/features/

- "SPN": Optional paid VPN alternative similar to Tor, our source of revenue - https://safing.io/spn/

I am hesitant to use this, it appears to be basically unmaintained

https://github.com/cloudflare/boringtun/issues/344

https://github.com/cloudflare/boringtun/issues/407

Maybe https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go ?

Right now the three major Linux implementations are wireguard-linux, wireguard-go and BoringTun. With some recent improvements to wireguard-go I decided to benchmark each one of them with ping and iPerf 3 over TCP and UDP.

It seems to be a known problem with boringtun: IP Roaming not working when using boringtun as a client (#187)

They’ve been on the Rust train since at least 2019. Just look at projects like quiche, wrangler, and boringtun

I assume since Wiresock is using BoringTun(https://github.com/cloudflare/boringtun) under the hood, it works similar to other userspace implementations of wireguard, (e.g. wireguard-go, wireguard-rs) in that it uses a TUN device to deliver packets to the userspace implementation, and back out to the network. So, no driver installation required, but CAP_NET_ADMIN is required to create the TUN device.

It's using some sort of a custom installer that also downloads Cloudflare's BoringTun (https://github.com/cloudflare/boringtun) directly from the author's website (nyr[.]be), since Cloudflare doesn't seem to offer it as a binary release. Example:

    { wget -qO- https://wg.nyr[.]be/1/latest/download 2>/dev/null || curl -sL https://wg.nyr.be/1/latest/download ; } | tar xz -C /usr/local/sbin/ --wildcards 'boringtun-*/boringtun' --strip-components 1

https://github.com/cloudflare/boringtun https://github.com/WireGuard/wireguard-go