Alternatives
Products that do what Wag, MFA and Enrollment for WireGuard does
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…
- 1WE
WireHub is a side project I've been working on, on and off, for close to a year now. It's made with django and minimal javascript. It's a hosted WireGuard config generator/manager, that you can invite others to join your networks and manage their own configs/devices. It's still very much a beta, maybe an mvp, but I just wanted to get some early from the community. Thanks!
2023 · wirehub.org
- 2TB
My elderly parents are behind a 5G connection in rural areas, and I help them manage their network from overseas. I found a reasonably priced 5G router that can do external antennas required for it to work, but the only reasonable ways to get access to it is either through OpenVPN or WireGuard, the latter of which is much more lightweight and preferred with the memory constraints of the device. The problem with WireGuard is that it requires handling key management oneself, and configuring the keys to every device you want to access it from. It also doesn't play nicely together with other…
Sep 2025 · github.com
- 3WE
2021 · github.com
- 4WA
eBPF is an amazing technology that allows safely running user-supplied functions at pretty much arbitrary probe points in a kernel/user space context. Much has been written about how amazing this feature is for kernel observability. But as someone who writes user space code, what I find even more amazing is the support for tracing arbitrary user space programs, with no code changes and low overhead. However, doing in-depth analysis can get complicated and time-consuming. My goal with wachy was to make this debugging significantly easier/faster to use, by displaying traces in a TUI…
2022 · rubrikinc.github.io
- 5UE
Hi HN, I'm Tyler Flint, one of the creators of qtap. For a while now, my team and I at Qpoint.io have been grappling with the challenge of understanding what's actually happening inside the encrypted traffic leaving our production systems. Modern apps rely heavily on third-party APIs (think payment processors, data providers, etc.), but once TLS kicks in, figuring out exactly what data is being sent, identifying PII exposure, or debugging integration issues becomes incredibly difficult without resorting to complex and often brittle solutions. Traditional approaches like forward proxies…
2025 · github.com
- 6AV
2022 · github.com
- 7OS
2024 · defguard.net
- 8TY
Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…
2024 · probe.sh
- 9BT
2024 · github.com
- 10PP
Hey HN, I've been working on an intercepting proxy for penetration testing over the last few years in my spare time. Some points of difference from the existing tools: * The UIs are built using the native platform frameworks, meaning they look and behave like other applications on the desktop. * It has a fully embedded and integrated Python scripting engine. * It’s fully native meaning it’s nicer on system resources. * It has a number of built in scripts to automate reconnaissance, content discovery, authorisation checks, etc. * The core of it is open source. I'm really keen to get any…
2023 · pakikiproxy.com
- 11AA
Hey HN! This is Adil, Salman and Jose and and we’re behind archgw [1]. An intelligent proxy server designed as an edge and AI gateway for agents - one that natively know how to handle prompts, not just network traffic. We’ve made several sweeping changes so sharing the project again. A bit of background on why we’ve built this project. Building AI agent demos is easy, but to create something production-ready there is a lot of repeat low-level plumbing work that everyone is doing. You’re applying guardrails to make sure unsafe or off-topic requests don’t get through. You’re clarifying vague…
2025 · github.com
- 12CW
2022 · github.com
- 13RA
Hey HN, There’s been a lot of interest recently in meta-harnesses, loops, and multi-agent orchestration. Obviously, there are already a lot of good tools: Conductor, cmux, the native Codex / Claude Code apps, etc. For my own use cases, I’ve felt that the orchestration layer tends to feel overengineered. I mostly wanted a simple local harness (i.e Pi) for running and tracking CLI agents with the ability to hop in (via tmux). Relaymux is my opinionated attempt at that. A few design principles: - The frontend is just Telegram / iMessage / CLI. If I want more visibility, I hop…
Jun 2026 · github.com
- 14DO
2023 · github.com
- 15SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com
- 16IB
Hi HN, I wanted to give my family, who are scattered all over the world, a simple and private way to connect. The commercial options didn't quite fit, and the open-source tools I found were a bit too barebones and not friendly enough for non-technical users. My main goal was to build something completely self-service. I wanted my family to be able to manage their own devices without my help, so I could set it up once and then stay out of it. This led me to build LeiaGuard, a self-hostable UI for WireGuard built with Next.js. To make it truly easy for everyone, the interface is available in…
2025 · github.com
- 17AC
Hi everyone! k8s-insider is a CLI tool to manage VPN networks and access Kubernetes workload and service resources directly through a WireGuard tunnel. It started as a simple Helm chart with a linuxserver/wireguard-like container image but, possibly due to my neurodivergence getting the better of me, evolved into a toolbox that, depending on the cluster configuration, can more or less automagically configure multiple networks with dynamic IP assignments and netpol-limited access to the cluster. I’ve found it to be a perfect middle ground between juggling multiple port-forwards and…
2023 · github.com
- 18MW
So I got so involved in setting up AdWords, tracking down WP security bloggers, etc. that I forgot to post it here and get you all to check it out and offer suggestions. It's only been out for a couple weeks or so though, so this still qualifies as "launch window", I guess. Check it out here: http://www.panic-press.com/ Promo code "show-hn" for a free month to try it out. It has 100 uses, so it shouldn't run out, but if it does, let me know.
2012
- 19AA
Hi HN! This is Salman, Adil, Shuguang and Co working on ArchGW[1] - an open-source lightweight proxy server for prompts - written in Rust and built on top of Envoy[2]. Arch moves the critical but pesky handling and processing of prompts: task understanding, prompt routing, safety, and observability - outside business logic. Its an edge and egress proxy for agentic apps. We've talked to 100s of developers at places like Twilio, GE Healthcare, Redhat, Square, etc and there was a consistent theme in building AI apps: to move past a nascent demo they are left to their own devices in building out…
2025 · github.com
- 20IU
2023 · gist.github.com
- 21
- 22WT
2021 · wg-tray.arcanite.ch
- 23HM
I made this as a pair programming exercise with o1-preview. o1 did most of the heavy lifting, through high level prompts, but eventually I needed to diverge from it to get to completion. My initial prompt was: --- I'm making a web app: It's like 4chan, but each thread starts with a gps coordinate. People can only post text and images. I want to build it with flask and sqlalchemy. I want just the backend and data model that supports these threads, anonymous users, and users that can register a permanent username. Write as much of it as you can for me. --- This produced a fully scaffolded…
2024 · mapchan.com
- 24SE
Hello. I made this project as an experiment in using key cryptography for user identity in a client server model, and for some future peer to peer projects that I am working on. I am looking for feedback, please let me know what you think. Also, Merry Christmas to HN! :-)
2022 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →