2 ms·
Maybe https://github.com/cloudflare/boringtun https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go https://github.com/WireGuard/
by yjftsjthsd-h 3y ago
Maybe https://github.com/cloudflare/boringtun https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go https://github.com/WireGuard/wireguard-go ?
- lxgr 3y agoI believe it uses the latter, but the missing piece is a userspace TCP/IP stack, since otherwise you'd need TUN device permissions to bridge over the impendence mismatch of sockets and IP packets containing TCP/UDP segments/datagrams. It uses gVisor for that.
- yjftsjthsd-h 3y agoUgh, now this is driving me crazy. So I'm 99% sure that that exists, but I cannot for the life of me find the link. There's a CDN / edge compute company that gets published on HN semi-regularly that has this sweet client that... does a lot of things, but among them is connecting to your serverless containers by actually instantiating an entire TCP/IP stack in the application that's hooked up to the remote end over a wireguard proxy that's also in-application... Edit: FLY! https://news.ycombinator.com/item?id=30275905 https://news.ycombinator.com/item?id=30275905