Hacker News Reader

Comment by password4321 | Hacker News Reader

If you want to tunnel UDP (WireGuard) or TCP (SSH) over the WebSocket protocol, check out https://github.com/erebe/wstunnel

View on HN

Looks neat. Have you looked into using the new WebTransport protocol?

https://datatracker.ietf.org/doc/html/draft-ietf-webtrans-ov... https://datatracker.ietf.org/doc/html/draft-ietf-webtrans-ht...

Still early stages, but it looks promising! Notably it supports multiple streams and unreliable datagrams since it goes over QUIC

Also https://github.com/nnathan/monopiped. Just plugging my own project.

Why would you tunnel WireGuard over SSH?

Perhaps reread the comment. It presents info for running Wireguard or SSH over websockets and not running Wireguard over ssh.

Although not relevant to my post above, tunneling WireGuard over SSH sounds like an interesting challenge...

Because WireGuard and SSH are at different layers of the network stack, it might be necessary (though slow) to bridge two WireGuard networks through a single TCP socket port-forwarded by SSH. I'm actually curious now what tools would best be used to accomplish this, how much effort would be needed to configure things, and how badly performance would suffer when faced with normal internet traffic congestion.

> I'm actually curious now what tools would best be used to accomplish this

“Tunnel UDP over SSH”

https://superuser.com/questions/53103/udp-traffic-through-ss... has some suggestions

Reply on news.ycombinator.com