Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
The main features of anywherelan/awl are: Overlay Networks.
Open-source alternatives to anywherelan/awl include: build-trust/ockam — Ockam is a zero-trust networking framework designed to secure data transit between distributed applications using an… connet-dev/connet — A p2p reverse proxy with NAT traversal. Inspired by frp, rathole and ngrok. firezone/firezone — Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to… gravitational/teleport — Teleport is a zero-trust access platform designed to provide secure, identity-based connectivity to servers,… gravitl/netmaker — Netmaker is a platform for automating and managing virtual mesh networks built on WireGuard. It functions as a… aperturerobotics/bifrost.
Ockam is a zero-trust networking framework designed to secure data transit between distributed applications using an identity-based network overlay. It provides the primitives necessary to establish mutually authenticated and end-to-end encrypted connections, removing the reliance on traditional network-layer security. The project is distinguished by its use of attribute-based access control and verifiable credentials to manage trust at scale. It implements cryptographic identity rotation to maintain identity continuity and integrates with hardware-backed key management systems to secure priv
A p2p reverse proxy with NAT traversal. Inspired by frp, rathole and ngrok
Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to internal network resources. It functions as a virtual private network that synchronizes authentication and user groups via OpenID Connect providers. The system implements a group-based access control engine to enforce least privilege by restricting network resources to specific user groups. It utilizes holepunching and relay protocols for NAT traversal to establish encrypted tunnels through firewalls without requiring inbound ports. The platform includes a control plane for managing
