squat/kilo
Kilo is a multi-cloud network overlay built on WireGuard and designed for Kubernetes (k8s + wg = kg) observed · 2026-08-28
Health v2 · maintenance only
78/100
- Activity 98
- Release rhythm 41
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2813
- days_rel: 182
- days_push: 14
- n_releases_24m: 1
Adoption not part of the score
2284 stars · 141 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across data centers, clouds, and NAT boundaries. It runs as an agent (kg) on every node and can act as a full CNI or an add-on alongside existing networking like Flannel, also enabling VPN access for external peers and multi-cluster services.
Use cases
- connect kubernetes nodes across different clouds into one cluster
- create a multi-cloud kubernetes cluster with encrypted pod networking
- vpn into a kubernetes cluster to access pods and services securely
- connect two kubernetes clusters to share services privately
- encrypt cluster traffic between nodes on unsecured networks
- run local development workloads connected to a remote cluster
- add wireguard networking on top of flannel
- give cluster workloads secure access to services behind a corporate vpn
When to choose
- you need a single kubernetes cluster spanning multiple clouds or data centers
- you want wireguard-based encrypted pod networking with a simple agent
- you need private multi-cluster services without exposing them via ingress or nodeport
- you want external clients or developers to VPN into the cluster network
- you need a lightweight CNI add-on that complements an existing network plugin
When to avoid
- you run kubernetes on windows or non-linux nodes without WireGuard support
- you need a CNI with rich L7 policy or service mesh features
- your cluster is single-location and your existing CNI already meets your needs
- you cannot load the WireGuard kernel module or use a userspace fallback
Facets
service · maturity active
networking vpn security cryptography self-hosted networking cloud-computing security infrastructure-as-code microservices go self-hosted cloud wireguard kubernetes-cni multi-cloud multi-cluster network-overlay cni vpn-mesh kubernetes-networking containers linux kubernetes docker
6 sources
- readme: https://github.com/squat/kilo · fetched 2026-08-28 · ae4e4271bd76
- homepage: https://kilo.squat.ai · fetched 2026-08-29 · 6075d5c395ca
- site_page: https://kilo.squat.ai/docs/introduction · fetched 2026-08-29 · 1db04ca4fb07
- site_page: https://kilo.squat.ai/docs/vpn · fetched 2026-08-29 · 6d04b4f4c4a3
- site_page: https://kilo.squat.ai/docs/multi-cluster-services · fetched 2026-08-29 · 933943e8fcbc
- site_page: https://kilo.squat.ai/docs/topology · fetched 2026-08-29 · be155d9e8fa5
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| squat/kilo | main | 78 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem