# cloudflare/boringtun

Userspace WireGuard® Implementation in Rust

Repository: https://github.com/cloudflare/boringtun
Canonical: https://ross.abutalabs.com/products/boringtun
Language: Rust
License: BSD-3-Clause
License Family: permissive
Topics: wireguard, rust, cloudflare
Last push: 2026-06-29T06:18:56+00:00

## Health v2 (maintenance only)
Score: 63/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 90, release rhythm 8, longevity 100
- inputs: {"age_days": 2882, "days_push": 65, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 7185, forks 529 (observed 2026-08-28T04:09:56.493571+00:00)

## What it is
BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (boringtun-cli) for Linux and macOS. It is deployed in production on millions of mobile devices via Cloudflare's 1.1.1.1 app and thousands of Linux servers.

## Use cases
- set up a userspace WireGuard VPN tunnel on Linux or macOS
- embed WireGuard protocol support in an iOS or Android app
- use wg-quick with a userspace implementation
- build a custom VPN client without kernel WireGuard support
- implement fast portable WireGuard in Rust

## When to choose
- you need a userspace WireGuard implementation without kernel module requirements
- you want to embed the WireGuard protocol in a mobile or cross-platform Rust application
- you need a production-proven WireGuard library (used by Cloudflare at scale)

## When to avoid
- you need a full VPN solution with GUI and key management out of the box
- you require Windows support, which is not a documented target
- you want a stable master branch - the repo is undergoing restructuring and crates.io is recommended

## Facets
- artifact type: library
- maturity: active
- function: vpn, networking, cryptography, security
- domain: networking, security, privacy, cross-platform
- platform: rust
- tags: wireguard, userspace-implementation, tunnel, vpn-client, linux, macos, android, ios

## Member repositories
- cloudflare/boringtun (main) score 63

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:56.493571+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:39:54.888558+00:00, confidence not recorded.
  - readme: https://github.com/cloudflare/boringtun (fetched 2026-08-28T04:09:56.493571+00:00, sha 785e2ebac311)
  - registry_crates: https://crates.io/api/v1/crates/boringtun (fetched 2026-08-29T08:35:02.268713+00:00, sha 3c648ecc29a8)
- Data as of 2026-08-30T08:39:29.467469+00:00.