fshy

fshy / Egress and tunnels

WGTCP

github.com · Egress and tunnels · 1 record · JSON

WGTCP Egress and tunnels

paidanonymousno cardD

github.com/secwest/WGTCP · tool (wireguard transport) · egress/wgtcp · JSON · compare

Free tierno service and no account; a patch to the Linux kernel WireGuard module with Ubuntu 24.04 binaries
unit none; metered on none
PriceUSD 0
Per-object capnot applicable
Retentionnot applicable
Egressnot applicable; the software states no volume; ingress: tcp
free_allowance: none published
Identityanonymous no account
Bindingnone both peers must run the patched kernel module, which means two hosts with module build or install rights; that is outside the vocabulary
Interfacecli wg and wg-quick unchanged
ToolingUbuntu 24.04 amd64 and arm64 archives, or build from source
Composes withcomposes only with hosts where the operator controls the kernel, so a free-tier VM works and a managed tunnel does not.
Reliabilityout-of-tree kernel patch for a specific kernel and distro; both peers must match
NotesThe only project that removes the extra hop instead of adding one: TCP framing happens in the kernel module, so there is no proxy process and no userspace re-encapsulation. It still needs a peer at the other end running the same patched module, so it does not reach a hosted tunnel, and installing a patched kernel module on both ends is a heavier commitment than running a userspace wrapper. Its measured numbers are the author's, quoted here as reported.
Evidence rungdocumented a measured A/B against UDP WireGuard on a named path would raise it; the repository publishes its own comparison numbers, which are reported rather than reproduced here
Checked2026-10-23 (live); stale on 2026-11-22
Parsed numbers
  • $.price_per_tb_month price-per-tb USD0.0 TB / month
Evidence (4)
datesourcewhat it proved
2026-10-23github.com/secwest/WGTCP"adds a high-performance TCP transport patch to the Linux WireGuard kernel module" and the wg / wg-quick compatibility claim
2026-10-23github.com/secwest/WGTCP"It has not been approved, endorsed, or adopted by the WireGuard project"
2026-10-23github.com/secwest/WGTCPno GitHub releases, last push 2026-08-04, 27 stars
2026-10-23github.com/secwest/WGTCPthe author reports 512 comparison cells and CPU reductions of 6.7-10.9 percent for clean-LAN bulk transfer; reported, not measured here
More fields (10)
{
 "wg_path": "native-conf",
 "wg_detail": "\"Keep the usual keys, peers, AllowedIPs, preshared keys, keepalives, wg, and wg-quick workflow\" - the standard configuration drives it, with the transport swapped underneath",
 "ingress": "tcp",
 "volume_tib_month": null,
 "volume_stated": "not applicable; the software states no volume",
 "bytes_transit": "yes",
 "transit_note": "directly between the two patched peers, with no intermediary process",
 "hosting_requirement": "two hosts that can install the patched kernel module, one of them publicly reachable",
 "last_release": "no GitHub releases; last push 2026-08-04",
 "stars": 27
}
Unknown or withheld values (2)
  • $.per_object_cap.stated not-applicable
  • $.retention.stated not-applicable