VpnCloud - Peer-to-Peer VPN

VpnCloud is a simple VPN over UDP. It creates a virtual network interface on the host and forwards all received data via UDP to the destination. VpnCloud establishes a fully-meshed VPN network in a peer-to-peer manner. It can work on TUN devices (IP based) and TAP devices (Ethernet based). Tunneling traffic between two nodes can be as easy as:

vpncloud -c REMOTE_HOST:PORT --ifup 'ifconfig $IFNAME 10.0.0.1/24 mtu 1400 up'

More details can be found in the manpage. Some performance measurements can be found here.

Project Status

This project is still under development but has reached a somewhat stable state. VpnCloud features the following functionality:

• Setting up tunnels between two networks via Ethernet (TAP) and IP (TUN)
• Connecting multiple networks with multiple forwarding behaviors (Hub, Switch, Router)
• Encrypted connections using libsodium
• Automatic peer-to-peer meshing, no central servers
• NAT and (limited) firewall traversal using hole punching
• Automatic reconnecting when connections are lost
• Non-native forwarding modes, e.g. IP based learning switch and prefix routed Ethernet networks.
• High throughput and low additional latency (see performance page)
• Support for tunneled VLans (TAP device)

However there are some open issues:

• Encryption has not been formally reviewed, use with care.
• The tests might be missing some corner cases and more field tests would be nice.

Please feel free to help and contribute code.

Semantic Versioning

This project uses semantic versioning. Currently that means that everything can change between versions before 1.0 is finally released. However I am considering to release 1.0 soon.