Chained VPN routing lab with Linux netns, veth, and iptables

What it does

Chain multiple VPNs using Linux netns, veth, iptables and WireGuard — full isolation & control - saumasamir/multi-vpn-routing

One of the most challenging and satisfying infrastructures I’ve ever built. sudo ip netns add " $NAMESPACE " sudo ip netns exec " $NAMESPACE " ping 8.8.8.8 # Should timeout At this point, there's no connectivity. Routing begins here. sudo ip netns exec " $NAMESPACE " ip route add default via " $BRIDGE_IP " 5. Starting WireGuard inside namespace sudo ip netns exec " $NAMESPACE " wg-quick up " $WG_CONF_FILE " sudo ip netns exec " $NAMESPACE " ip addr add " $SERVER_IP /24 " dev " $WIREGUARD_NAME " 6. NAT rules (iptables on host) # POSTROUTING sudo iptables -t nat -A POSTROUTING -s " $CLIENT_IP " -o ens3 -j MASQUERADE sudo iptables -t nat -A POSTROUTING -s " $CLIENT_IP " -o " $WIREGUARD_NAME "…from github.com

In the maker’s words, at launch

I built a chained VPN lab to support multi-user traffic isolation using only raw Linux tools. Each user gets: - A WireGuard tunnel - A dedicated namespace (wg-$user) bridged via veth - NAT and routing table override - A second namespace (ovpn-$user) running OpenVPN - Final egress through tun1 The entire setup is…

• 
  vpnns – Per-app VPN using Linux namespaces2016 · github.com · ▲40

  OpenConnect proxy. Contribute to cernekee/ocproxy development by creating an account on GitHub.

• 
  Encrypted VPN in 2k lines of Go2017 · github.com · ▲123

  Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN. - twitchyliquid64/subnet

• 
  Netrinos – A keep it simple Mesh VPN for small teamsDec 2025 · netrinos.com · ▲93

  I'm the founder at Netrinos. I built a WireGuard-based mesh VPN because remote access has always been a pain. After years of SSH tunnels, IPsec headaches, and the ssh log horror movie, I wanted something simpler: install, sign in, get work done. Netrinos creates a LAN-like overlay network across your devices. Connections are direct P2P via WireGuard, with no central server routing traffic. Each device gets a stable IP and DNS name (pc.you.netrinos.com). When direct connections fail, they fall back to a relay server that's still encrypted end-to-end. We can't see your traffic. The most…

• 
  Onetun – Access your WireGuard network from anywhere2021 · github.com · ▲92

  User space WireGuard port-forward in Rust. Contribute to aramperes/onetun development by creating an account on GitHub.

• YN
  Yggdrasil Network – compact mesh routing experiment for mesh networks2019 · yggdrasil-network.github.io · ▲120

  End-to-end encrypted IPv6 networking to connect worlds

• 
  eth-private-net – Tooling to run a private Ethereum network locally2017 · github.com · ▲140

  Create your own Ethereum private net. Contribute to vincentchu/eth-private-net development by creating an account on GitHub.

• 
  /dev/null▲494

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Run full iOS 16.5 firmware on Android Devices▲474

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 23h ago · github.com

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  Tapflow 2.0▲1,125

  We built Tapflow for devs, designers, PMs, and tech folks who’ve been sitting on internal docs, templates, and systems — but never productized them. Upload a PDF, notes, or workshop deck, and Tapflow drafts a structured product (with chapters, teaser and pricing plans). It’s good for AI kits, onboarding guides, design systems, and frameworks. You can sell through Stripe, LemonSqueezy, or PayPal. Real-time collaboration is in early beta. No site builder, no LMS — clean design and just focused tools to ship. Fully bootstrapped and just launched on PH today →…

  Work · 2025 · tapflow.ai

• C9
  Clippy – 90s UI for local LLMs▲1,122

  Life & fun · 2025 · felixrieseberg.github.io

• 
  Appwrite Sites▲990

  Appwrite 2.0 brings a new engine, a rebuilt Console, five database types, an S3 API, an OAuth 2.1 server, and organization-level Domains and Firewall.

  Dev tools · 2025 · appwrite.io

• 
  AI Meeting Notes by Notion▲965

  Perfect meeting memory in Notion

  AI · 2025 · notion.com

• 
  Den▲948

  Multiplayer AI agent builder

  AI · 2025 · getden.io

• 
  Raycast for iOS▲870

  Powerful productivity on the go

  AI · 2025 · raycast.com