# kgl-overlay — a self-hosted mesh VPN

Canonical page: https://keilab.io/research/kgl/

research · kgl

kgl-overlay is the lab's self-hosted, Tailscale-class mesh VPN, written in Rust on QUIC and built on standard networking and cryptography. It is designed to join machines into one private network.

## What it is

kgl-overlay joins machines into one private network, in the spirit of Tailscale and WireGuard: a mesh between hosts, access rules, an exit node and name resolution. It is assembled from standard networking and cryptography components rather than from the lab's research math.

## In our tests

In our tests the data plane between two network namespaces passed 4 of 4 pings with 0% loss.

## What is not public

The overlay's wire format and engineering detail are documented for partners under mutual NDA.

cross-references

- [→ KeiAuth (sibling)](https://keilab.io/security/keiauth/)
- [⊘ Security overview](https://keilab.io/security/)

Status: In development

Stack: Rust · QUIC · standard cryptography

Sensitivity: Engineering public · wire format under NDA

[⊸ Partner inquiry](https://keilab.io/contact/)

---
KeiLab is operated by KeiSei LLC, a Wyoming limited liability company. +1 307 210 8538
Site index for AI agents: https://keilab.io/llms.txt