Open Source Rust VPN Software

VPNCloud is a peer-to-peer VPN solution that uses UDP tunneling to create secure, distributed virtual networks. Unlike traditional VPNs, VPNCloud creates mesh-like connections between nodes and is particularly useful for remote access, private networks, or IoT environments. It supports both encrypted and plaintext tunnels, dynamic peer discovery, and flexible routing. With minimal configuration, VPNCloud provides a lightweight way to link multiple machines across the internet as if they were on the same LAN.

GlobalProtect-openconnect is an open-source VPN client that connects to Palo Alto Networks GlobalProtect gateways using OpenConnect. It supports macOS, Linux, FreeBSD, and OpenBSD through a graphical desktop application and command-line interface. Users can authenticate through single sign-on, multifactor authentication, FIDO2 security keys, or client certificates. Browser-based authentication allows users to complete login through their preferred web browser. The application supports multiple VPN portals and gateways, including direct gateway connections. Automatic connection at system startup and system tray controls simplify everyday VPN management. Command-line tools provide connection management, diagnostic logging, and Host Information Profile report generation. Built with Rust and Tauri, it offers an alternative to proprietary GlobalProtect clients.

BoringTun is a high-performance, portable implementation of the WireGuard VPN protocol written in Rust, designed so that developers and system integrators can run WireGuard tunnels entirely in user space across a variety of operating systems without kernel modules. It implements the core WireGuard protocol — including key exchange, encryption (ChaCha20-Poly1305), and authenticated transport — while omitting platform-specific tunneling stacks, allowing embedment in custom VPN client applications or userspace networking tools. The repository includes both a library for programmatic use and a command-line executable that can act as a userspace WireGuard interface on supported platforms like Linux and macOS. Because it’s written in Rust, BoringTun benefits from strong safety guarantees, memory safety without garbage collection, and cross-platform support, making it suitable for mobile, desktop, and server environments.

Sing-Box Windows is a cross-platform desktop proxy management client built with Tauri 2, Vue 3, and Rust. It provides a graphical interface for configuring and controlling the sing-box networking core. Users can import proxy subscriptions in sing-box JSON, Clash/Mihomo YAML, and URI formats. The application supports switching between system proxy, TUN, and manual operating modes. Real-time monitoring displays network traffic, active connections, routing rules, and logs. Built-in kernel management simplifies downloading, updating, and importing sing-box components. Reliability features include configuration backups, subscription rollback, automatic recovery, and startup diagnostics. Sing-Box Windows also offers system tray integration, automatic startup, multilingual interfaces, and local configuration storage across Windows, Linux, and macOS.

Open-source MARZ VPN client apps for Android, Windows and Linux: one-tap connect, servers in the US, Sweden and Russia (VLESS with REALITY), sign-in with Telegram or email, plan and traffic shown in the app. English, Russian, Persian and Simplified Chinese. Windows and Linux apps include a Kill Switch (on by default, can be turned off in Settings) and DNS protection. The Android app has no Kill Switch of its own; use Android's "Always-on VPN" and "Block connections without VPN". The apps are free and GPL-3.0-or-later licensed. Connecting requires a MARZ VPN account with a trial or paid plan. The free trial starts only when you activate it in the Telegram bot and lasts up to 72 hours or 3 GiB, whichever comes first. Paid plans from $2 per 30 days. Website: https://marzvpn.com Source: https://github.com/amberfield2931/MARZ-VPN-Apps Telegram: https://t.me/MarzReality_bot Support: support@marzvpn.com No warranty. A VPN cannot guarantee complete privacy or anonymity.

AdbTether lets your Windows PC use your Android phone's internet — including the VPN on the phone. No root, hotspot, or VPN client on the PC. Connect your phone, enable debugging, and press Connect. Everything your PC does online goes through the phone: browsing, apps, updates, calls. If the phone is on a VPN, PC traffic exits through it too, so the PC shares the phone's VPN and exit location. Nothing is installed on the phone: a small helper runs on demand, so Android's battery saver cannot freeze it. On the PC it sets up a virtual network connection in the background. If the link drops, the PC stays offline instead of falling back to the local network, so traffic cannot leak out. IPv6 is blocked and address lookups stay inside the tunnel. Disconnect removes the routes and DNS settings it added; close the app and the PC is back on its normal network. Free and open source (MIT). Needs Windows 10 1809+ / 11 (64-bit) and an Android phone with USB or Wi-Fi debugging.

Roomler replaces Tailscale, TeamViewer and Microsoft Teams with one daemon and one web app. Every machine you enroll joins a private WireGuard mesh with stable IPs and MagicDNS. Open any of those machines' desktops in a browser tab, forward a port, run a SOCKS5 proxy, or SSH in with no sshd and no open port - plus team chat and HD video calls on the same server. Traffic is peer-to-peer and end-to-end encrypted: the server only coordinates auth, policy and signalling, and never sees your pixels, keystrokes, files or tunnelled bytes. Self-host it free on unlimited devices - same code as the hosted service, no crippled community build, no licence key, no phone-home - or use the hosted service at roomler.ai. Agent runs on Windows, Linux and macOS; built in Rust. Split licence: AGPL-3.0 for the server, MPL-2.0 for everything you install on a machine, so MSPs can build on the agent freely. More demos: youtube.com/@RoomlerAI

NymVPN is an open-source, decentralized virtual private network designed to protect internet traffic and communication metadata. Unlike conventional VPN services, it routes connections through independently operated network nodes to reduce reliance on a single provider. The application offers a five-hop mixnet mode that uses layered encryption, traffic mixing, and cover traffic to resist surveillance. It also provides a faster two-hop AmneziaWG mode for browsing, streaming, and everyday activities. Users can configure connection settings, select network nodes, and manage DNS preferences. Additional protections include a kill switch, split tunneling, and built-in blocking of ads and trackers. Available across major desktop and mobile platforms, NymVPN combines encrypted connectivity with metadata privacy.