erebe/wstunnel

Health v2 · maintenance only

Adoption not part of the score

6996 stars · 559 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

wstunnel is a Rust CLI tool that tunnels arbitrary TCP, UDP, Unix socket, or stdio traffic over WebSocket, HTTP2, or WebTransport to bypass firewalls, proxies, and DPI. It supports static and dynamic (Socks5, HTTP, transparent) tunneling in both forward and reverse directions, with TLS/mTLS and standalone static binaries.

Use cases

• bypass firewall or DPI restrictions on a public network
• tunnel traffic over websocket since http is always allowed
• expose a service behind NAT via reverse tunnel
• create a socks5 proxy over a websocket connection
• tunnel wireguard udp traffic over websocket
• route traffic through an http proxy gateway

When to choose

• you need to tunnel arbitrary TCP/UDP traffic through networks that only allow HTTP/WebSocket
• you want a single static binary with no runtime dependencies
• you need reverse tunneling or dynamic socks5/transparent proxying
• you want TLS/mTLS with certificate auto-reload out of the box

When to avoid

• you need a general-purpose VPN with full network-layer encryption like WireGuard alone
• you need a GUI-managed VPN solution for non-technical users
• your network already allows direct connections and you just need a plain VPN

Facets

cli-tool · maturity active

proxy networking websocket vpn security networking security privacy censorship-circumvention windows cross-platform cli tunneling websocket-tunnel firewall-bypass dpi-evasion socks5-proxy wireguard http2 static-binary reverse-tunnel transparent-proxy command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="erebe/wstunnel")