Dev tools · alternatives · 2026
24 alternatives to Chained VPN routing lab with Linux netns, veth, and iptables
I built a chained VPN lab to support multi-user traffic isolation using only raw Linux tools. Each user gets: - A WireGuard tunnel - A dedicated namespace (wg-$user) bridged via veth - NAT and routing table override - A second namespace (ovpn-$user) running OpenVPN - Final egress through tun1 The entire setup is controlled with bash scripts and PostgreSQL — no Docker, no containers, no Python, just raw netns, iptables, ip rule and shell. Built for GDPR-compliant VPN infra with real isolation per collaborator. Code and README:…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

OpenConnect proxy. Contribute to cernekee/ocproxy development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 2

Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN. - twitchyliquid64/subnet
2017 · github.com · its alternatives →
- 3

I'm the founder at Netrinos. I built a WireGuard-based mesh VPN because remote access has always been a pain. After years of SSH tunnels, IPsec headaches, and the ssh log horror movie, I wanted something simpler: install, sign in, get work done. Netrinos creates a LAN-like overlay network across your devices. Connections are direct P2P via WireGuard, with no central server routing traffic. Each device gets a stable IP and DNS name (pc.you.netrinos.com). When direct connections fail, they fall back to a relay server that's still encrypted end-to-end. We can't see your traffic. The most…
Dec 2025 · netrinos.com · its alternatives →
- 4

Articles in this series Part I. Iterative ServersPart II. Forking ServersPart III. Pre-forking ServersPart IV. Threaded ServersPart V. Pre-threaded ServersPart VI: poll-based serverPart VII: epoll-…
2019 · unixism.net · its alternatives →
- 5

WireHub is a side project I've been working on, on and off, for close to a year now. It's made with django and minimal javascript. It's a hosted WireGuard config generator/manager, that you can invite others to join your networks and manage their own configs/devices. It's still very much a beta, maybe an mvp, but I just wanted to get some early from the community. Thanks!
2023 · wirehub.org · its alternatives →
- 6

WireHole offers a unified docker-compose project that integrates WireGuard, PiHole, and Unbound, complete with a user interface. This solution is designed to empower users to swiftly set up and manage either a full or split-tunnel WireGuard VPN. It features ad-blocking capabilities through PiHole and enhanced DNS caching and privacy options via Unbound. The intuitive UI makes deployment and ongoing management straightforward, providing a comprehensive VPN solution with added privacy features.
2023 · github.com · its alternatives →
- 7

User space WireGuard port-forward in Rust. Contribute to aramperes/onetun development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 8YN
End-to-end encrypted IPv6 networking to connect worlds
2019 · yggdrasil-network.github.io · its alternatives →
- 9

Create your own Ethereum private net. Contribute to vincentchu/eth-private-net development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 10

Make a self hosted OpenVPN server in 15 minutes. Contribute to robbintt/popup-openvpn development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 11

My elderly parents are behind a 5G connection in rural areas, and I help them manage their network from overseas. I found a reasonably priced 5G router that can do external antennas required for it to work, but the only reasonable ways to get access to it is either through OpenVPN or WireGuard, the latter of which is much more lightweight and preferred with the memory constraints of the device. The problem with WireGuard is that it requires handling key management oneself, and configuring the keys to every device you want to access it from. It also doesn't play nicely together with other…
2025 · github.com · its alternatives →
- 12

Hey HN! I just released weron, a P2P VPN that uses WebRTC for transport which I've been working on for the last couple of months. It can create both layer 2/Ethernet and layer 3/IP overlay networks, and the underlying transport layer can be easily embedded to write your own P2P apps with Go. Compared to for example Tailscale, WireGuard and ZeroTier, its much harder to block on a network level and also significantly easier to set up, while not sacrifing much performance. I'd love to get your feedback :)
2022 · github.com · its alternatives →
- 13

Hi HN, For the past few months, I've been exploring tools that integrate with the Linux networking stack. This led me to build SafeHaven, a lightweight and configurable VPN implementation written in Go. The goal was to better understand how virtual private networks work at a fundamental level. Would love feedback from the community! Repo link: https://github.com/kwakubiney/safehaven
2025 · github.com · its alternatives →
- 14

Hi Everyone, TunnlTo is a tool for controlling which Windows applications, processes, and IP addresses can use a WireGuard VPN tunnel. Here are some examples of how it could be used: - Route only FireFox through a privacy VPN - Route Slack and Microsoft Office through a work VPN - Route a game through a gaming VPN - Stop a game from routing through a privacy VPN - Stop a browser from routing through a work VPN - Route a specific IP address range through a privacy VPN - Route all traffic through a privacy VPN except a specific IP address range I have been collaborating on this project with…
2023 · github.com · its alternatives →
- 15

- 16

FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation. - naggie/dsnet
2020 · github.com · its alternatives →
- 17

Lightweight system monitor for Linux VPS. Contribute to leodeim/vpsmon development by creating an account on GitHub.
Aug 2026 · github.com · its alternatives →
- 18RT
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.
May 2026 · numa.rs · its alternatives →
- 19

SSH-based "VPN for poors". Contribute to ivanilves/xiringuito development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 20

Hi HN, To truly understand how operating systems and network protocols work, I decided to combine two classic learning tools: the xv6 teaching OS and a from-scratch TCP/IP stack. I'm excited to share the result: my own from-scratch TCP/IP networking stack running directly inside the xv6-riscv (https://github.com/pandax381/xv6-riscv-net) kernel. The project uses a modern virtio-net driver, allowing it to run seamlessly in QEMU and communicate with the host machine. Key features: - From-Scratch Stack: The core is powered by microps…
2025 · github.com · its alternatives →
- 21

Easily connect to a VPN in a country of your choice. - rodrigogs/easyvpn
2017 · github.com · its alternatives →
- 22

- 23

1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole - ezaquarii/vpn-at-home
2018 · github.com · its alternatives →
- 24
UpVPN▲103Serverless VPN on WireGuard, many devices, no subscription
2023 · upvpn.app · its alternatives →
Also compare
- vpnns – Per-app VPN using Linux namespaces alternatives
- Encrypted VPN in 2k lines of Go alternatives
- Netrinos – A keep it simple Mesh VPN for small teams alternatives
- ZeroHTTPd: A web server to teach Linux performance, with benchmarks alternatives
- WireHub – easily create and share WireGuard networks alternatives
- WireHole combines WireGuard, Pi-hole, and Unbound with an easy UI alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →