EasyTier/EasyTier
EasyTier
EasyTier is a decentralized peer-to-peer virtual private network and mesh networking tool. It functions as a layer 3 network overlay that establishes secure tunnels between devices without requiring a centralized server or coordinator. It also serves as a WireGuard-compatible VPN, capable of acting as a server for standard WireGuard clients.
The project distinguishes itself through multipath latency-based routing and the use of KCP or QUIC proxies to mitigate packet loss and stabilize connections in high-loss environments. It provides a virtual networking manager featuring a web management console, a graphical user interface, and a remote procedure call API for administrative control.
The system covers a broad range of connectivity and routing capabilities, including NAT traversal via hole punching and relay nodes, CIDR-based subnet mapping to resolve IP conflicts, and the ability to share local network segments with remote peers. It supports traffic encryption through algorithms such as AES-GCM and ChaCha20.
The software can be deployed across various operating systems and architectures as a binary, container, or system service.
Features
- Peer-to-Peer Networking - Implements a decentralized peer-to-peer virtual private network that establishes secure tunnels without a central coordinator.
- VPN Establishment - Enables the creation of secure virtual private networks where all participants act as equal peers.
- Cross-Platform Clients - Connects devices across different operating systems and architectures into a single encrypted private network.
- Local Subnet Sharing - Exposes physical local network subnets to virtual network peers, enabling remote access to local devices and services.
- Mesh Networking - Establishes secure P2P mesh tunnels between devices across platforms using NAT traversal and multipath routing.
- NAT Traversal Mechanisms - Utilizes hole punching and relay nodes to establish direct peer-to-peer connections through restrictive firewalls.
- Address Conflict Resolution - Implements virtual NAT to map physical subnets to virtual addresses, resolving IP conflicts between distributed nodes.
- Multipath Latency Routing - Optimizes network performance by continuously monitoring real-time latency to select the most efficient path across peer links.
- Network Traffic Routing - Provides definition of manual route CIDRs and automatic selection of the lowest latency path for packet forwarding.
- Latency-Based Path Selection - Automatically selects the optimal link between network nodes to minimize delay and maximize throughput.
- Overlay Networks - Implements a layer 3 network overlay that maps physical subnets to virtual addresses to resolve IP conflicts.
- Packet Loss Mitigation - Uses KCP or QUIC proxies to maintain stable bandwidth and low latency during high-loss network events.
- Peer Discovery - Provides decentralized peer discovery using a combination of direct addresses and public shared discovery nodes.
- Peer Discovery - Locates network members through direct address entry and public shared discovery nodes.
- Protocol Stabilization - Converts TCP traffic to KCP or QUIC to reduce latency and maintain stability in high-loss environments.
- Routing Optimization Utilities - Automatically selects the most efficient network route based on real-time latency monitoring.
- Subnet Routing - Provides mechanisms for extending network reach to local segments by exposing physical network segments to other nodes.
- Virtual Network Interfaces - Implements a virtual network interface that intercepts and forwards packets between the OS and peer nodes.
- WireGuard Management - Acts as a server for standard WireGuard clients and manages encrypted virtual tunnels.
- Encrypted Tunneling Protocols - Establishes secure tunnels using a selectable suite of encryption algorithms including AES-GCM, ChaCha20, and WireGuard.
- Peer Communication Security - Secures communication between nodes using selectable algorithms such as AES-GCM or ChaCha20.
- Traffic Encryption - Secures data transmission using WireGuard or AES-GCM encryption to prevent unauthorized access.
- Management Consoles - Includes a self-hosted web management console for configuring the network and monitoring nodes via a browser.
- Management Interfaces - Provides a comprehensive management suite featuring a web console, GUI, and RPC API for network configuration.
- P2P Link Optimization - Optimizes link establishment via lazy loading, forced announcements, and NAT hole punching.
- Cross-Platform Tunneling - Establishes secure VPN tunnels across Windows, Android, Linux, iOS, and HarmonyOS.
- Exit Node Routing - Designates specific nodes as gateways to forward all outgoing traffic for other clients in the network.
- Subnet Exporting - Allows sharing of local network subnets with other peer nodes using optional CIDR mapping.
- Low-Latency Data Transmission - Streams data through KCP or QUIC proxies to minimize packet loss and improve bandwidth.
- Network Addressing - Supports the assignment of static IPv4 and IPv6 addresses or automatic determination via DHCP.
- Network Routing - Implements control of network segment entry via automatic route generation or restricted allowed-segment lists.
- Encrypted Relaying - Routes data through public discovery nodes when direct peer-to-peer connections are unavailable.
- Network Management Interfaces - Ships a graphical user interface for controlling network connections and simplifying administrative tasks.
- Connection Management - Maintains network stability using multipath routing and automatic switching to healthy network links.
- Private Network Configurations - Assigns network names and secrets to verify and group nodes within a specific virtual private network.
- Remote Procedure Call Interfaces - Exposes an RPC-based interface for remote administrative control and configuration updates of network nodes.
- CIDR Mapping - Implements translation of physical subnets to virtual subnets to resolve IP address conflicts between nodes.
- KCP-QUIC Proxies - Wraps TCP traffic in KCP or QUIC protocols to mitigate packet loss and stabilize connections in high-loss environments.
- Latency Optimization - Reduces packet loss and delay by routing traffic through the lowest latency paths using KCP or QUIC.
- Virtual Network GUIs - Offers a visual interface for modifying virtual network configurations, toggling group connections, and monitoring system logs.
- Remote Management - Provides a remote management interface with optional IP whitelisting for administrative control of nodes.
- Networking and Infrastructure - Decentralized virtual private network solution.
- Network Security - Decentralized mesh VPN with WireGuard support.
