Crate wireguard_netstack 

Userspace WireGuard tunnel with TCP/IP network stack.

This crate provides:

• WireGuard tunnel implementation using gotatun
• Userspace TCP/IP stack using smoltcp
• DNS-over-HTTPS resolver for privacy (with configurable DNS servers)
• High-level ManagedTunnel for easy integration

DNS Configuration

You can configure different DNS servers for:

• Pre-connection (direct mode): Used before the WireGuard tunnel is established
• Post-connection (tunnel mode): Used after the tunnel is up, queries go through VPN

use wireguard_netstack::{WgConfigFile, DohServerConfig, DnsConfig};

// Use Google DNS for resolving the WireGuard endpoint
let config = WgConfigFile::from_file("wg.conf")?
    .into_wireguard_config_with_dns(DohServerConfig::google())
    .await?;

Example

use wireguard_netstack::{ManagedTunnel, WgConfigFile, TcpConnection};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    // Load WireGuard configuration
    let config = WgConfigFile::from_file("wg.conf")?
        .into_wireguard_config()
        .await?;
     
    // Connect (handles all background tasks automatically)
    let tunnel = ManagedTunnel::connect(config).await?;
     
    // Create a TCP connection through the tunnel
    let addr = "93.184.216.34:80".parse()?;
    let conn = TcpConnection::connect(tunnel.netstack(), addr).await?;
     
    // Use the connection...
    conn.write_all(b"GET / HTTP/1.1\r\nHost: example.com\r\n\r\n").await?;
     
    // Graceful shutdown
    tunnel.shutdown().await;
    Ok(())
}

Re-exports

pub use config::WgConfigFile;

pub use dns::DnsConfig;

pub use dns::DohResolver;

pub use dns::DohServerConfig;

pub use error::Error;

pub use error::Result;

pub use netstack::NetStack;

pub use netstack::TcpConnection;

pub use netstack::DEFAULT_MTU;

pub use tunnel::ManagedTunnel;

pub use wireguard::WireGuardConfig;

pub use wireguard::WireGuardTunnel;

Modules

config

WireGuard configuration file parser.

dns

DNS-over-HTTPS (DoH) resolver with configurable DNS servers.

error

Error types for wireguard-netstack.

netstack

Userspace TCP/IP network stack using smoltcp.

tunnel

High-level managed WireGuard tunnel.

wireguard

WireGuard tunnel implementation using gotatun.