tonarino/innernet
Innernet
Innernet is a WireGuard VPN mesh orchestrator and control plane that automates the deployment of encrypted tunnels between distributed peers. It functions as a virtual private network that coordinates endpoint discovery and distributes network configurations from a centralized server to establish a private overlay network.
The system differentiates itself through a structured peer management lifecycle, using single-use invitation files for secure onboarding and cryptographic key exchange. It provides granular network segmentation by organizing peers into named CIDR blocks, allowing administrators to restrict or permit traffic flow between specific logical network segments.
The project covers broader capabilities including peer access management, the ability to override automatic endpoint discovery with manual mappings, and the programmatic injection of host-file mappings for local domain resolution. On Linux systems, it interacts directly with the kernel via netlink sockets to program routing tables and network interfaces.
Features
- Mesh Networking - Automates the distribution of peer endpoints and keys to orchestrate a private encrypted mesh network.
- Mesh VPN Coordination Servers - Operates as a coordination server that manages WireGuard peers and assigns IP addresses for a private overlay mesh network.
- Network Coordination Planes - Functions as a centralized control plane for managing endpoint discovery and distributing network configurations.
- Centralized Configuration Distribution - Provides a central server to synchronize network settings and peer endpoints for automated tunnel setup.
- Peer-to-Peer Networking - Manages the active status of nodes within a peer-to-peer networking model to control their visibility.
- Mesh Network Coordinators - Functions as a coordination server that manages key exchange and topology for the secure mesh network.
- Peer Connection Management - Distributes peer endpoint and configuration data via a central server to facilitate direct connectivity.
- Peer-to-Peer Tunneling - Coordinates endpoint information to establish direct encrypted communication tunnels between peers.
- Access Management - Manages the peer lifecycle through secure registration and status toggles to grant or revoke network access.
- Private Networks - Establishes a secure, isolated private overlay network for encrypted communication between distributed hosts.
- Peer Identity Managers - Manages the peer lifecycle via invitation-based onboarding and active status toggles to control access.
- Remote Device Connectivity - Coordinates endpoint information and IP addresses to establish reliable secure connections between remote machines.
- Virtual Private Networks - Provides a secure communication layer that encrypts traffic between hosts via tunnel implementations.
- WireGuard VPN Orchestrators - Automates the deployment of WireGuard tunnels and manages client configurations from a centralized control plane.
- WireGuard VPN Support - Utilizes the high-performance WireGuard kernel protocol to establish secure, encrypted peer-to-peer tunnels.
- Invitation-Based Onboarding - Registers new network peers and exchanges cryptographic keys using secure, single-use invitation files.
- Network Access Controls - Controls peer network connectivity by enabling or disabling specific nodes through security policies.
- Peer Provisioning - Generates secure invitation files for new nodes to register public keys and join the encrypted network.
- Network Traffic Segmentation - Organizes peers into logical groups using CIDR blocks to restrict or permit inter-segment communication.
- Tunnel Interface Configuration - Configures properties of tunnel interfaces for both kernel and userspace WireGuard implementations.
- Netlink Communication - Uses Linux netlink sockets to program network interfaces and routing tables directly in the kernel.
- CIDR-Based - Implements network-level access restrictions by permitting or restricting traffic flow based on CIDR blocks.
- Overlay Networks - Private network management tool utilizing standard CIDR concepts.
- Network and Transport Security - Creates private networks using WireGuard for secure communication.
- Network Security - Private mesh network overlay using WireGuard.
