One small core does what a kernel does for a network path. Tunnels, proxies and rules run on it, and so does everything you build. The OS is VPN Works; its kernel is vpnw.
17 of 17
Ways out of the sealed sandbox tried, and all blocked, IPv6 included
236 of 236
Test functions passed, with end-to-end runs of the real binary through a real WireGuard tunnel
36 of 36
Faults thrown at WireGuard tunnels and handled, run directly and through the rotate plugin: a silent peer, lost handshakes, an impostor, a DNS server that lies
11 of 11
Forbidden requests sent straight to an exit with a valid token, and all refused there by the client's own policy
Measured on VPN Works 0.8.0 by tools/record-results.sh in the code repository: the sandbox on a GitHub Actions Linux runner, the rest on one Linux machine with 2 CPUs.
releases
VPN Works 0.7.0 brings Exit back, inside vpnw itself. vpnw exit runs on a server with fixed addresses, takes each client’s requests over TLS, decides every one …
releases
VPN Works 0.8.0 opens a new kind of plugin, the Tunnel. A Tunnel plugin hands the kernel WireGuard configs and says how long to keep each, and vpnw runs every tunnel …
releases
VPN Works 0.5.0 brings Ledger back, as plugins. One seals every event of a run into a file as it happens. The other checks that file and names the line anyone changed. …
releases
VPN Works 0.6.0 brings Lab back as the fault kit every tunnel must pass before it ships. It broke the WireGuard path 18 ways. The path now handles all 18, and four fixes …
testing
Every number on vpnw.com comes from one script in the code repository, run on one Linux machine with 2 CPUs. Its output is committed next to the code, so anyone can check …
releases
VPN Works 0.4.0 sends one program through a WireGuard tunnel and leaves the rest of the machine alone. vpnw runs the tunnel itself, inside its own process, so it needs no …
releases
VPN Works 0.4.1 adds no features. It closes the one gap the 0.4.0 tests left open, and it fixes a bug those same tests turned up along the way. The gap was IPv6. A sealed …
releases
VPN Works started as five separate engines that each worked and didn’t add up to one thing. Version 0.3.0 rebuilt it from scratch as one small core, vpnw, with …
about
VPN Works is the name of an operating system for network paths: the VPN, rebuilt as an OS. It isn’t a VPN app. There’s no server list, no country picker and …
Teams running AI agents, scrapers or build jobs that need narrow, recorded network access, and anyone who'd like to write a plugin for VPN Works, are welcome to write.