proxy wireguard over TCP/TLS
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Travis Burtrum e5a318c14c Implement equivalent of in pure rust in 4 years ago
src Implement equivalent of in pure rust in 4 years ago
.gitignore Initial Commit 4 years ago
Cargo.lock Initial Commit 4 years ago
Cargo.toml Initial Commit 4 years ago
LICENSE-APACHE Initial Commit 4 years ago
LICENSE-MIT Initial Commit 4 years ago Implement equivalent of in pure rust in 4 years ago Re-factor code, send packet length header in TCP, add test 4 years ago


Proxy wireguard UDP packets over TCP/TLS

wireguard-proxyd is a server-side daemon to accept TCP connections from multiple clients and pipe data to and from the specified UDP port
wireguard-proxy is a client-side daemon that accepts UDP packets on a local port from a single client, connects to a single remote TCP port, and pipes data between them


udp-test is a utility to send a UDP packet and then receive a UDP packet and ensure they are the same, this verifies packets sent through proxy/proxyd are unmolested runs udp-test against itself and then through proxyd/proxy
udp-test -s runs udp-test against itself through proxyd/proxy

Testing with GNU netcat:

  • nc -vulp 51820 listen on udp like wireguard would
  • nc -u -p 51821 51820 connect directly to local udp wireguard port to send data to 51820 from port 51821
  • nc -vlp 5555 listen on tcp like wireguard-proxy would
  • nc 5555 connect directly to local tcp wireguard-proxy port to send/recieve data
  • so to test through wireguard-proxy run first and last command while it's running, type in both places


This project is licensed under either of

at your option.


Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in die by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.