L7: HTTP CONNECT forward proxy for app-domain egress
There is no root package API — import the subpackage you need.
Uplink
Client: TCP + TLS + framed MsgData carrying WireGuard packet bytes to the relay.
Server (relay / gateway, also a WireGuard peer): terminates TLS, authenticates ClientHello, registers sessions, and supports SendToPeer for reverse traffic.
Name-based egress via HTTP CONNECT over the mesh (underlay remains WireGuard). See docs/PROXY_L7_EGRESS.md.
Develop
go test ./... -race
Release
From GitHub Actions → Release → Run workflow: enter a semver (v0.1.0 or 0.1.0). The workflow runs tests, pushes an annotated tag, and creates a GitHub Release (notes auto-generated). Consumers can then:
Package uplink provides a WebSocket Secure (WSS) framed transport for carrying WireGuard packet payloads between a relay-attached peer and its relay/gateway.
Package uplink provides a WebSocket Secure (WSS) framed transport for carrying WireGuard packet payloads between a relay-attached peer and its relay/gateway.
Click to show internal directories.
Click to hide internal directories.
go.dev uses cookies from Google to deliver and enhance the quality of its services and to
analyze traffic. Learn more.