Hacker News - Newest: "wireguard"

Show HN: wireplug.org – Free roaming and NAT traversal for WireGuard

alpn — Tue, 14 Jul 2026 16:02:41 +0000

Hi all,

One of the most common use cases of WireGuard is to set up small mesh VPNs, either for your homelab, or for a small team of people who move between locations throughout the day (e.g., home -> coffee shop -> office, etc)

Problem is, vanilla WireGuard doesn't handle NAT traversal or roaming.

I wanted to fix that, with as little additional software as possible, and make it freely available to everyone, without requiring a subscription or an account.

The result is wireplug.org.

wireplug lets you create mesh VPNs using standard WireGuard. Your config files stay almost the same, except you no longer have to specify an `Endpoint` for your peers. Instead, wireplug detects all your possible endpoints (including LAN) and coordinates them with your peers for you. This lets you keep managing your own keys and network topology, while also maintaining connectivity when moving between networks.

Key Features:

  - Detects network changes and updates endpoints  automatically
  - Handles NAT traversal
  - Connects peers locally when on the same LAN
  - Uses kernel WireGuard when available
  - Keeps your keys under your control
  - Free to use, no account required
  - Open source, written in Rust
  - Tested on macOS, Linux, and OpenBSD

More info - https://wireplug.org

Github - https://github.com/alpn/wireplug

Comments URL: https://news.ycombinator.com/item?id=48908899

Points: 1

# Comments: 0

Deep dive into iroh: Replacement for WireGuard or P2P layer for your application

cold_pizz4 — Wed, 24 Jun 2026 14:36:31 +0000

Article URL: https://kerkour.com/iroh-v1-p2p

Comments URL: https://news.ycombinator.com/item?id=48660642

Points: 16

# Comments: 2

Networking tool to host WireGuard servers with only outbound connections

tuta88 — Mon, 22 Jun 2026 08:39:20 +0000

Article URL: https://github.com/klauscam/BastionRoute

Comments URL: https://news.ycombinator.com/item?id=48627466

Points: 2

# Comments: 0

Show HN: I built a Rust TUI that runs WireGuard and OpenVPN side by side

harrykp — Sat, 13 Jun 2026 09:45:12 +0000

Hi HN - I built Vortix, a terminal UI for managing WireGuard and OpenVPN connections. It runs on macOS and Linux, supports multiple simultaneous tunnels (one primary + N split tunnels), and surfaces real-time telemetry / DNS-leak / IPv4-leak detection without leaving the terminal.

Why Vortix? I wanted a single interface to: See connection status, throughput, and latency at a glance. Detect IP/DNS leaks without running separate tools. Switch between VPN profiles without remembering CLI flags

Comments URL: https://news.ycombinator.com/item?id=48515390

Points: 1

# Comments: 0

Qanah – WireGuard-Like P2P VPN

xlmnxp — Mon, 08 Jun 2026 04:04:19 +0000

Article URL: https://github.com/xlmnxp/qanah

Comments URL: https://news.ycombinator.com/item?id=48441211

Points: 2

# Comments: 2

User level WireGuard for UDP based encryption and authentication

blenderob — Sun, 24 May 2026 15:44:57 +0000

Article URL: https://utcc.utoronto.ca/~cks/space/blog/tech/WireGuardForUDPAuthEncryption

Comments URL: https://news.ycombinator.com/item?id=48258213

Points: 2

# Comments: 0

TLSOps – self-hosted domain-based WireGuard routing for your network

delbirin — Wed, 20 May 2026 15:59:22 +0000

Article URL: https://tlsops.com/

Comments URL: https://news.ycombinator.com/item?id=48209877

Points: 2

# Comments: 0

Mullvad WireGuard exit IP design may allow user fingerprinting across servers

abderrazakxabd — Wed, 20 May 2026 14:43:29 +0000

Analysis suggests Mullvad’s WireGuard exit IP assignment may be deterministic, allowing potential correlation of users across different servers. Could this weaken anonymity in some threat models? read more : https://digitalescapetools.com/2026/05/mullvad-wireguard-exit-ip-correlation.html

Comments URL: https://news.ycombinator.com/item?id=48208725

Points: 3

# Comments: 1

Show HN: Nylon – A dynamic, self-optimizing WireGuard mesh VPN

chenjq — Mon, 18 May 2026 13:12:47 +0000

I built nylon because I wanted one unified VPN that connects across all my cloud servers, mobile devices and workstations, whether they are on the same LAN, or across the internet.

I also had latency-sensitive "work" ahem (game streaming). So if I were on the same physical network as my gaming pc, I want my VPN to route via the lowest latency LAN path, only falling back to other nodes when I'm travelling or at school.

Note: I have considered Tailscale, Nebula and the like. These work most of the time, but do not give me control over how data is routed. They generally establish direct links (or at most, 1-hop via a relay), and do not take the state of the underlying network into account.

With nylon, I can choose to add links with more premium networks like CN2 GIA or Akamai's (via two Linodes in diff regions). Nylon would take these links into account, and dynamically pick the best routing using Babel (RFC 8966).

If you're interested in the details, I wrote a blog post diving into the challenges of building this: https://jiaqi.dev/posts/nylon

Docs for getting started: https://nylon.jq.ax

Would love to hear thoughts & feedback! Thanks :)

Comments URL: https://news.ycombinator.com/item?id=48179358

Points: 3

# Comments: 0