{"rid":"egress/wgtcp","card":{"rid":"egress/wgtcp","eid":"github-secwest","topic":"egress","slug":"wgtcp","provider":"WGTCP","url":"https://github.com/secwest/WGTCP","domain":"github.com","category":"tool (wireguard transport)","tier":"free","verdict":"paid-only","vorder":3,"grp":"paid","confidence":"documented","binding":"none","identity_kind":"anonymous","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"cli","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-23T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-23","stale_on":"2026-11-22","n_evidence":4,"usd_month":null,"usd_per_tb_month":null,"summary":"no service and no account; a patch to the Linux kernel WireGuard module with Ubuntu 24.04 binaries","duplicate_of":null,"n_unknown":2},"record":{"topic":"egress","slug":"wgtcp","provider":"WGTCP","url":"https://github.com/secwest/WGTCP","category":"tool (wireguard transport)","tier":"free","free_tier":{"stated":"no service and no account; a patch to the Linux kernel WireGuard module with Ubuntu 24.04 binaries","unit":"none","metered_on":"none","source_url":"https://github.com/secwest/WGTCP","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://github.com/secwest/WGTCP","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://github.com/secwest/WGTCP","notes":""},"egress":{"terms":"not applicable; the software states no volume; ingress: tcp","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://github.com/secwest/WGTCP"},"interface":["cli"],"interface_detail":"wg and wg-quick unchanged","tooling":"Ubuntu 24.04 amd64 and arm64 archives, or build from source","chaining":"composes only with hosts where the operator controls the kernel, so a free-tier VM works and a managed tunnel does not.","limits":[],"limits_note":"","binding":"none","binding_note":"both peers must run the patched kernel module, which means two hosts with module build or install rights; that is outside the vocabulary","identity_cost":{"kind":"anonymous","detail":"no account","country":"None"},"reliability_note":"out-of-tree kernel patch for a specific kernel and distro; both peers must match","confidence":"documented","confidence_note":"a measured A/B against UDP WireGuard on a named path would raise it; the repository publishes its own comparison numbers, which are reported rather than reproduced here","evidence":[{"url":"https://github.com/secwest/WGTCP","date":"2026-10-23","proved":"\"adds a high-performance TCP transport patch to the Linux WireGuard kernel module\" and the wg / wg-quick compatibility claim"},{"url":"https://github.com/secwest/WGTCP","date":"2026-10-23","proved":"\"It has not been approved, endorsed, or adopted by the WireGuard project\""},{"url":"https://github.com/secwest/WGTCP","date":"2026-10-23","proved":"no GitHub releases, last push 2026-08-04, 27 stars"},{"url":"https://github.com/secwest/WGTCP","date":"2026-10-23","proved":"the author reports 512 comparison cells and CPU reductions of 6.7-10.9 percent for clean-LAN bulk transfer; reported, not measured here"}],"verdict":"paid-only","verified_at":"2026-10-23T00:00:00.000Z","price_per_tb_month":"USD 0","notes":"The only project that removes the extra hop instead of adding one: TCP framing happens in the kernel module, so there is no proxy process and no userspace re-encapsulation. It still needs a peer at the other end running the same patched module, so it does not reach a hosted tunnel, and installing a patched kernel module on both ends is a heavier commitment than running a userspace wrapper. Its measured numbers are the author's, quoted here as reported.","extras":{"wg_path":"native-conf","wg_detail":"\"Keep the usual keys, peers, AllowedIPs, preshared keys, keepalives, wg, and wg-quick workflow\" - the standard configuration drives it, with the transport swapped underneath","ingress":"tcp","volume_tib_month":null,"volume_stated":"not applicable; the software states no volume","bytes_transit":"yes","transit_note":"directly between the two patched peers, with no intermediary process","hosting_requirement":"two hosts that can install the patched kernel module, one of them publicly reachable","last_release":"no GitHub releases; last push 2026-08-04","stars":27}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price-per-tb","num":0,"unit":"TB","per":"month","currency":"USD","usd":0,"fx_date":null,"parse":"ok"}],"unknown":[["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}