research · kgl

kgl-overlay — a self-hosted mesh VPN.

kgl-overlay is the lab's self-hosted, Tailscale-class mesh VPN, written in Rust on QUIC and built on standard networking and cryptography. It is designed to join machines into one private network.

What it is

kgl-overlay joins machines into one private network, in the spirit of Tailscale and WireGuard: a mesh between hosts, access rules, an exit node and name resolution. It is assembled from standard networking and cryptography components rather than from the lab's research math.

In our tests

In our tests the data plane between two network namespaces passed 4 of 4 pings with 0% loss.

What is not public

The overlay's wire format and engineering detail are documented for partners under mutual NDA.