Wag, MFA and Enrollment for WireGuard
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…
In plain words
Wag is a multi-factor authentication and enrollment system built on top of WireGuard. It addresses gaps in WireGuard's device security and enrollment processes by adding MFA capabilities and streamlined device onboarding. The project uses eBPF for low-level network operations and recently transitioned to etcd for clustering and high availability. Wag is designed for teams needing stronger security controls around WireGuard deployments without relying on commercial alternatives.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3 to etcd. So please be forgiving if it does some weird things! Hope you all enjoy! P.s Im not a web developer and any tips on that front to make it less teeth pullingly awful are welcome!
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
