Hacker News new | ask | show | jobs
by anderspitman 1941 days ago
This is fantastic. I maintain a list[0] of tunneling software. One of the few downsides of WireGuard is the inability to run it in unprivileged situations. The complexity and performance overhead here might still be too much to edge out solutions like SSH tunnels, but I love that the space is being explored.

I'm hopeful we'll also see some robust QUIC-based tunneling tools over the next couple years.

[0]: https://github.com/anderspitman/awesome-tunneling
2 comments
benjaminl 1941 days ago
With the coming ubiquity of QUIC, its seems natural to have a QUIC based analog to OpenVPN using packet based QUIC instead of OpenVPN’s UDP/TLS.

It also seems rather obvious to extend WireGuard to run over QUIC in addition to UDP. But the movement on that front has been very limited.

link
russdill 1941 days ago
tunsocks[0] might be of interest to you. It's very similar to the software mentioned by OP except in C. It uses the lwIP usermode tcp/ip stack. It doesn't itself have any VPN or tunneling support, but instead relies on raw packets being passed into and out of a pipe. It can then provide access to that network via various proxies, port forwards, and even raw packets via NAT (very useful for VMs).

[0]: https://github.com/russdill/tunsocks

link