VpnCloud - Peer-to-Peer VPN
VpnCloud is a simple VPN over UDP. It creates a virtual network interface on the host and forwards all received data via UDP to the destination. VpnCloud establishes a fully-meshed VPN network in a peer-to-peer manner. It can work on TUN devices (IP based) and TAP devices (Ethernet based). Tunneling traffic between two nodes can be as easy as:
$> vpncloud -c REMOTE_HOST:PORT --ifup 'ifconfig $IFNAME 10.0.0.1/24 mtu 1400 up'
For more information, please see the Website.
This project is still under development but has reached a somewhat stable state. VpnCloud features the following functionality:
- Setting up tunnels between two networks via Ethernet (TAP) and IP (TUN)
- Connecting multiple networks with multiple forwarding behaviors (Hub, Switch, Router)
- Encrypted connections
- Automatic peer-to-peer meshing, no central servers
- NAT and (limited) firewall traversal using hole punching
- Automatic reconnecting when connections are lost
- Non-native forwarding modes, e.g. IP based learning switch and prefix routed Ethernet networks.
- High throughput and low additional latency (see performance page)
- Support for tunneled VLans (TAP device)
- Option to hide protocol header
- Automatic port forwarding via UPnP
Compiling from source
Prerequisites: Git, Cargo, Ronn
The checked-out code can be compiled with
cargo build or
cargo build --release (release version). The binary could then be found in
The tests can be run via
This software can be cross-compiled for a number of different architectures. Please also see the extended rust cross compilation docs.
ARMv7 (e.g. Raspberry Pi)
Install the Cargo target
$> rustup target add armv7-unknown-linux-gnueabihf
Install the required build environment (on Ubuntu)
$> sudo apt-get install -qq gcc-arm-linux-gnueabihf
Build the software
$> cargo build --release --target=armv7-unknown-linux-gnueabihf
Debian / Ubuntu
Deb packages for each release can be found in the releases section. Currently only packages for amd64 are available (I am accepting help on building and packaging for other platforms).
Debian packages can be built using cargo-deb:
Arch Linux (AUR)
There is a VpnCloud package for Arch Linux thanks to Oscar Rainford (fourbytes).
CentOS 7 (maybe other RPM based)
CentOS 7 .rpm package can be built using cargo-rpm:
On an CentOS 7:
Install the required build environment (on CentOS 7)
$> yum groupinstall -y 'Development Tools'
Build the software
$> cargo rpm build
rpm will be situated in
There are several areas in which still some work has to be done and where contributions are very welcome:
- Linux packages: VpnCloud is stable enough to be packaged for Linux distributions. Maintainers who want to package VpnCloud are very welcome.
- Security review: The security has been implemented with strong security primitives but it would be great if a cryptography expert could verify the system.
- Feedback on use cases: Some feedback on how VpnCloud is being used and maybe some tutorials covering common use cases would be nice.
This project uses semantic versioning. Currently that means that everything can change between versions before 1.0 is finally released. However I am considering to release 1.0 soon.