Nylon is a Resilient Overlay Network built from WireGuard, designed to be performant, secure, reliable, and easy to use.
- Dynamic Routing: nylon does not require all nodes to be reachable from each other, unlike mesh-based VPN projects (e.g Tailscale, Nebula, ZeroTier and Innernet)
- Ease of Deployment: nylon runs on a single UDP port (
57175), is distributed by a single statically-linked binary, and is configured by a single configuration file. - WireGuard Backwards Compatibility: connect existing WireGuard clients to a nylon network with no extra software. Useful for mobile clients.
Download the latest release binary from the releases page, then head to the docs for setup instructions.
Sample systemd service and launchctl plist files can be found under the examples directory.
Note
- I daily-drive the Linux and macOS versions, but the Windows client currently has issues. I recommend using WireGuard for Windows and connecting to a Linux/macOS machine as a passive client.
- Nylon is early stage software, so expect (some) bugs, breaking changes, and unaudited code.
- That said, nylon does not modify WireGuard's cryptographic code
- All nylon packets are sent within the WireGuard tunnel.
- Feel free to report bugs and suggest features via GitHub issues. For security concerns, contact me directly.
Built with sweat and tears (thankfully no blood)
nylon is not an official WireGuard project, and WireGuard is a registered trademark of Jason A. Donenfeld.