JIT WireGuard

• awesome-wireguard

  5 799 1.2

  A curated list of WireGuard tools, projects, and resources.

Roughly, yes. Netmaker has a self-hostable server though. With tailscsle of course the 3rd-party headscale is available. Netbird also seems promising. See https://github.com/cedrickchee/awesome-wireguard for more alternatives.

• noisysockets

  2 59 8.4 Go

  Userspace TCP/IP Sockets For WireGuard.

  

Might as well take the opportunity to shill one of my recent experimental projects, If you are interested in building Go apps that act as userspace WireGuard peers take a look at https://github.com/dpeckett/noisysockets

Based off the excellent work in done by wireguard-go but I've attempted to simplify and make things a lot more idiomatic for library use.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• netbird

  104 8,888 9.7 Go

  Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.

  

• Nebula

  140 13,717 8.6 Go

  A scalable overlay networking tool with a focus on performance, simplicity and security

  

(I am a Nebula maintainer.) We recently merged support for gVisor-based services, although it's very new, and I don't know of much experimentation that's been done with it yet: https://github.com/slackhq/nebula/pull/965

• awesome-tunneling

  112 13,381 8.5

  List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

I maintain this list:

https://github.com/anderspitman/awesome-tunneling

Your use case sounds interesting and there may be a tool out there that will do it, but I can't quite wrap my head around your description of how everything is connected and what runs where with your current setup.

I agree with sibling that my main question is what prevents you from using SSHFS or similar?

• obligator

  7 612 9.0 Go

  Simple and opinionated OpenID Connect server designed for self-hosters

  

The deployment experience is awesome, but for me[0] the killer feature of Fly.io is their Anycast network and features such as FLY_REPLAY and LiteFS that make clusering a breeze[1].

[0]: using them for https://lastlogin.io

[1]: Here's all the fly-specific code necessary to run LastLogin in a globally distributed way: https://github.com/lastlogin-io/obligator/blob/37f75cc861f1b...

• rtun

  1 0 - Go

  Utilities for reverse SSH tunnels

I have issues trusting SSHFS. It's never been stable enough for me. Maybe it's because I have to go through at least one ssh proxy, in addition to a VPN. Maybe it's that the remote filesystem is slow enough, so trying to do anything remotely is very slow.

But really, it think it's that I'm already in a terminal connected to a remote system. I don't want to have to go to a different terminal to try and transfer data that I'm already looking at. And trying to use a Finder window (or explorer) to navigate a complex remote filesystem hierarchy isn't fun.

Occasionally I can do my work locally, but usually the data is large enough that I have to do my work on a remote server/cluster. When I generate figures describing my data, I want to see those locally. This particular use-case could be solved by using something like Xpdf, but it's easier to send the figure back to my local machine and view it with Preview.app.

I also sometimes do need to send datafiles back to my local computer. In these cases, I could use sshfs (but don't like the duelling terminals) or scp (but my file paths can be long and complicated, so typing out paths is a pain). I used to actually just handle this with Dropbox. I'd have a program that would send files to a specific Dropbox folder and that would then sync to my local computer. That worked well, but the delay between syncing was an issue.

Here's the code/project I wrote to manage this: https://github.com/mbreese/rtun

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• aws-sso-cli

  3 392 8.9 Go

  A powerful tool for using AWS Identity Center for the CLI and web console.

• aws-ssm-ec2-proxy-command

  2 205 5.9 Shell

  AWS SSM EC2 SSH Proxy Command

• wg-jit

  2 3 3.8 Go

  JIT for WireGuard. Open Source and MIT Licensed. Based on the explanation by Fly.io on their website.

I thought this was brilliant and made a little POC here as I couldn't find the code anywhere: https://github.com/realrasengan/wg-jit

This doesn't implement the completion (replay or reverse initiate) which I think both are also novel approaches to this.

So exciting!

Suggest a related project