Open Source Go VPN Software

Xray-core is an enhanced superset of v2ray-core, providing a high-performance privacy proxy framework supporting XTLS. It offers full compatibility with v2ray configs, supports multiple protocols, advanced routing, and is distributed as a single executable.

WireGuard for Windows is the official full-featured WireGuard client for Microsoft Windows, built to provide native VPN functionality using the high-performance WireGuardNT kernel driver. The application delivers an integrated graphical and service-based experience that aligns with standard Windows networking, access control, and service management capabilities. It is the recommended method for running WireGuard on Windows systems and supports modern versions of the operating system across multiple CPU architectures. The client simplifies secure tunnel setup through key-based configuration while leveraging WireGuard’s streamlined cryptographic design for performance and reliability. Its architecture tightly integrates with the Windows networking stack to provide efficient packet handling and stable connections. The project is intended for both enterprise and individual users who require a secure, modern VPN solution on Windows platforms.

Tailscale is an open-source zero-configuration VPN and networking solution that makes it simple to create secure, private networks across devices by leveraging WireGuard under the hood. It lets users connect computers, servers, mobile devices, and cloud instances together with peer-to-peer encrypted tunnels without dealing with complex firewalls, NAT rules, or key distribution headaches. Instead of traditional VPN server infrastructure, Tailscale uses a coordination service to authenticate devices and exchange connection information, enabling automatic NAT traversal and minimal manual setup. The project includes a daemon (tailscaled) and a CLI tool that run on major operating systems, and it also forms the basis for the official clients on platforms like iOS and Android, though those have GUI wrappers not fully in this repository.

V2Ray is the core of the Project V platform—a set of network tools for building custom proxy/VPN setups. It supports multiple protocols (VMess, SOCKS, Shadowsocks, HTTP, etc.), advanced routing, dynamic inbound/outbound connections, and is focused on privacy and bypassing censorship.

Secure, context-aware access that just works. Access internal resources securely. Implement zero trust. Achieve compliance. All without the headache of a VPN. For teams that prefer a hosted solution while keeping data governance. For organizations that need advanced scaling, access control, and governance capabilities. IT and developers need a scalable access control solution to keep users productive, happy, and secure. Pomerium uses identity and context to ensure secure access to internal applications, servers, and infrastructure even from untrusted networks. Pomerium adds authentication and authorization to any application or server, giving IT Management a centralized panel for organization-wide control. Assert compliance in your current architecture without giving up control over data tenancy. Pomerium supports your infrastructure and can be deployed in all environments: cloud, hybrid, or on-prem. From AWS to Kubernetes and more, your internal and 3rd-party apps are covered.

Go Implementation of WireGuard is the official userspace implementation of the WireGuard VPN protocol written in Go, providing a portable alternative to kernel-level deployments. The project enables systems that cannot run the native kernel module to still create secure WireGuard tunnels by operating entirely in user space. When executed, the program creates a virtual network interface that can be configured using standard networking tools such as wg and ip, closely mirroring the behavior of kernel implementations. The software is part of the broader WireGuard ecosystem, which aims to deliver a fast, simple, and modern VPN built on state-of-the-art cryptography. Because it runs in user space, wireguard-go is especially useful for platforms like macOS, Windows, or restricted environments where kernel modules are unavailable.

cunīcu is a user-space daemon managing WireGuard interfaces to establish a mesh of peer-to-peer VPN connections in harsh network environments. To achieve this, cunīcu utilizes a signaling layer to exchange peer information such as public encryption keys, hostname, advertised networks, and reachability information to automate the configuration of the networking links. From a user perspective, cunīcu alleviates the need of manual configuration such as exchange of public keys, IP addresses, endpoints, etc.. Hence, it adopts the design goals of the WireGuard project, to be simple and easy to use. Thanks to Interactive Connectivity Establishment (ICE), cunīcu is capable of establishing direct connections between peers that are located behind NAT firewalls such as home routers. In situations where ICE fails, or direct UDP connectivity is not available, cunīcu falls back to using TURN relays to reroute traffic over an intermediate hop or encapsulate the WireGuard traffic via TURN-TCP.

OmniEdge is an Open source p2p layer 2 , zero-config mesh VPN infrastructure, a traditional VPN, AWS VPC, Ngrok, DDNS alternative. No central server, easy to scale with less maintenance. What happens in intranet, stays in in intranet.