Hey everyone, I wrote this tool because I wanted to be able to access ports running on peers in my WireGuard network from any computer/server; without having to install WireGuard locally and without having root access (no iptables configs).<p>So as long as you have a private key & peer IP dedicated for your roaming needs, you'll be able to forward a local port to a port on a secured peer.<p>This can be useful for a few other use-cases, like exposing services to the Internet from a separate server that doesn't have root access (like a non-privileged container).<p>I've also gotten feedback to enable reverse-tunneling (making a port accessible on a peer that forwards to a port running locally), which enables a few more use-cases. I'm looking for any more ideas or feedback that would fit in this tool!<p>I've described how the internals work in the README. It's still a proof-of-concept right now but I listed my little roadmap in the issues: reverse-tunneling, UDP support, multi-port-forwarding, etc. Happy to answer any questions.
A note: wireguard-go (the official userspace impl in golang) can do this since several months back. It uses gVisor's netstack as a tcp/udp provider to forward connections to its peer (compared to whitequark's smoltcp in case of onetun).<p>Here's a demonstration of both a http-client and a http-server running over wireguard (a poor man's QUIC, if you will): <a href="https://github.com/WireGuard/wireguard-go/tree/master/tun/netstack/examples" rel="nofollow">https://github.com/WireGuard/wireguard-go/tree/master/tun/ne...</a><p>fly.io wrote about such a setup not long ago too: <a href="https://news.ycombinator.com/item?id=26315695" rel="nofollow">https://news.ycombinator.com/item?id=26315695</a><p>And tailscale.com similarly uses wireguard with netstack to impl functionality unavailable on non-Linux/xBSD platforms: <a href="https://news.ycombinator.com/item?id=28261683" rel="nofollow">https://news.ycombinator.com/item?id=28261683</a>
The name cries out for an icon derived from a 'won ton' (americans usually pronounce it wahn tawn but the canto pronunciation is exactly like 'one tun').<p><a href="https://www.google.com/search?q=won%20ton&tbm=isch&tbs=itp:clipart" rel="nofollow">https://www.google.com/search?q=won%20ton&tbm=isch&tbs=itp:c...</a>