Tunnely
A privacy-first VPN platform built entirely in Rust. WireGuard-grade encryption, multi-relay mesh networking, channel bonding across multiple interfaces, QUIC traffic obfuscation, and network-level ad/tracker blocking. Shipped as a polished Tauri desktop app with a Next.js marketing site.
System Design
Four subsystems, one monorepo. Every component built from the ground up.
Desktop Client
Cross-platform desktop app built with Tauri 2. Rust backend handles tunnel lifecycle, tray integration, and system-level networking. Frontend is a reactive Solid.js + TypeScript UI.
Relay Server
Distributed relay infrastructure in Rust. Handles WireGuard tunnel termination, peer discovery, latency probing, and multi-hop packet forwarding across the mesh network.
Marketing Site
Public-facing website at tunnely.org. Built with Next.js, featuring landing pages, pricing tiers, and Stripe-integrated checkout flows.
Backend
Supabase-powered backend handling auth, subscription management, relay registry, and user config with Row-Level Security and Edge Functions.
Under the Hood
The technical details that make Tunnely different.
ChaCha20-Poly1305 symmetric encryption with Curve25519 key exchange. Implemented via userspace boringtun stack with async TUN device management. No kernel modules needed.
Automatic peer discovery, continuous latency probing, and optimal path computation for multi-hop routing across a distributed network of relay servers.
Aggregates multiple network interfaces simultaneously. WiFi, Ethernet, and Cellular combined with a custom binary protocol, packet reordering, and three selectable bonding modes.
Wraps WireGuard traffic as standard HTTPS/HTTP3 via a QUIC layer. VPN traffic becomes indistinguishable from normal web browsing, bypassing ISP-level DPI.
Built-in MITM HTTPS proxy performing client-side ad and tracker blocking directly at the network layer. No browser extensions required.
Full subscription billing with Stripe integration, webhook signature verification, and Supabase Edge Functions for secure payment processing and plan management.