aramperes/onetun

Health v2 · maintenance only

Adoption not part of the score

1042 stars · 52 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard network. It requires no root access, no kernel WireGuard module, and no system network configuration changes.

Use cases

• forward a local port to a service on a WireGuard network without installing WireGuard
• access WireGuard-protected services from devices without root access
• expose WireGuard network services inside rootless containers
• connect to a WireGuard peer from IoT or mobile devices that can't run WireGuard
• tunnel TCP and UDP traffic over WireGuard in user space

When to choose

• you need WireGuard connectivity without root or kernel module installation
• you're running in a rootless container or restricted environment
• you only need port forwarding to specific peers, not a full VPN tunnel
• you want a single static binary or Docker image with no system dependencies

When to avoid

• you need a full VPN tunnel with routing of all system traffic
• your OS already supports native WireGuard and you have root access
• you need high-throughput forwarding, as user-space networking adds overhead

Facets

cli-tool · maturity active

networking proxy vpn security networking security privacy self-hosted windows cross-platform cli rust wireguard port-forwarding user-space tunnel rootless smoltcp boringtun command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aramperes/onetun")