Ross ROSS = Recommend OSS · open-source software intelligence for agents

squat/kilo

Kilo is a multi-cloud network overlay built on WireGuard and designed for Kubernetes (k8s + wg = kg) observed · 2026-08-28

github.com/squat/kilo · homepage · Go · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

78/100

  • Activity 98
  • Release rhythm 41
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2813
  • days_rel: 182
  • days_push: 14
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

2284 stars · 141 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across data centers, clouds, and NAT boundaries. It runs as an agent (kg) on every node and can act as a full CNI or an add-on alongside existing networking like Flannel, also enabling VPN access for external peers and multi-cluster services.

Use cases

  • connect kubernetes nodes across different clouds into one cluster
  • create a multi-cloud kubernetes cluster with encrypted pod networking
  • vpn into a kubernetes cluster to access pods and services securely
  • connect two kubernetes clusters to share services privately
  • encrypt cluster traffic between nodes on unsecured networks
  • run local development workloads connected to a remote cluster
  • add wireguard networking on top of flannel
  • give cluster workloads secure access to services behind a corporate vpn

When to choose

  • you need a single kubernetes cluster spanning multiple clouds or data centers
  • you want wireguard-based encrypted pod networking with a simple agent
  • you need private multi-cluster services without exposing them via ingress or nodeport
  • you want external clients or developers to VPN into the cluster network
  • you need a lightweight CNI add-on that complements an existing network plugin

When to avoid

  • you run kubernetes on windows or non-linux nodes without WireGuard support
  • you need a CNI with rich L7 policy or service mesh features
  • your cluster is single-location and your existing CNI already meets your needs
  • you cannot load the WireGuard kernel module or use a userspace fallback

Facets

service · maturity active

networking vpn security cryptography self-hosted networking cloud-computing security infrastructure-as-code microservices go self-hosted cloud wireguard kubernetes-cni multi-cloud multi-cluster network-overlay cni vpn-mesh kubernetes-networking containers linux kubernetes docker

6 sources

Member repositories

RepositoryRoleHealth v2
squat/kilomain78

For agents

markdown · JSON · MCP: product_card(name="squat/kilo")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem