logoalt Hacker News

rVPN – stealth VPN with end-to-end encryption

24 points • by michaelsbradley • today at 9:42 PM • 11 comments • view on HN

Comments

tptacek • today at 10:07 PM

Not sure why you'd vibe-code a new VPN protocol, double ratchet or otherwise, when you can just take WireGuard and make a new transport for it.

WireGuard by itself is not a stealth VPN, but the things that make a VPN "stealthy" are all things you'd layer on top of a WireGuard design, not thread through the middle of it. A datagram-based protocol can run under any obscured transport.

We did this at Fly.io when we discovered that, for one reason or another, 5% of our users simply couldn't reliably use UDP. It was a one-day project to run it under WebSockets instead, and that was before coding agents.

➕ show 1 reply
Sha1rholder • today at 10:21 PM

> Memory-safe in Rust > The core is written in Rust, so entire classes of vulnerability cannot occur.

Hmm... It just ain't true.

---

For those who need a "stealth VPN", use <https://github.com/XTLS/Xray-core/> or its GUI version <https://github.com/2dust/v2rayN/>

eric15342335 • today at 10:20 PM

Why not Xray-core VLESS families? It sounds like your code is written by an LLM that is trained on Xray-core source code.

dieseltech • today at 9:57 PM

> We believe privacy should be proven, not promised

Then instantly gives you a shell script that it pipes to `sudo bash`. The irony isn't lost here.

➕ show 2 replies
PUSH_AX • today at 9:59 PM

There's only 4 mentions of Rust on the landing page. Are we sure this is memory safe enough?