vpnkit

The Haxe language: https://haxe.org/ https://frama-c.com/ https://fbinfer.com/ https://mirage.io/ https://coq.inria.fr/ https://github.com/ygrek/mldonkey (Stale project but large codebase.) https://akabe.github.io/ocaml-jupyter/ https://reasonml.github.io/ https://github.com/moby/vpnkit (Used by Docker)

The libraries are embedded in quite a few places; for example it's used in every single Docker for Desktop instance: - https://mirage.io/blog/2022-04-06.vpnkit - https://www.youtube.com/watch?v=zqFDEDl5Zes - https://github.com/moby/vpnkit - https://speakerdeck.com/avsm/the-functional-innards-of-docke... And then there are deployments in QubesOS, Xen, Nitrokey, etc. Bear in mind that MirageOS is a library OS, which doesn't just mean "compile to a standalone kernel instance". It just means that it can be linked into all sorts of embedded environments, some of which are the solo5 or Xen backends you see in talks. More on the Mirage blog: https://mirage.io/blog

Unfortunately this like other alternatives still misses some key features of Docker Desktop for Mac like utilizing VPNKit (https://github.com/moby/vpnkit) to make networking not constantly break when on a VPN without split tunneling, etc. I've started using minikube myself as I stopped constantly needing to use Cisco AnyConnect for work as we switched to using a Zscaler product instead - but this is a huge bugbear for many users I'd like to see somebody address.

Are you trying to avoid linking against Cygwin at runtime or trying to avoid Cygwin in the build environment too? In my case I use Cygwin in the build environment (see https://github.com/moby/vpnkit/blob/master/appveyor.yml) using Andreas Hauptmann's https://github.com/fdopen/opam-repository-mingw but I end up with an executable which doesn't require the Cygwin dll at runtime. I'm looking forward to the day when I won't need Cygwin even in the build environment. Since the OCaml compiler itself works fine on Windows and modern build systems like "dune" are also Windows-friendly I'm fairly optimistic this can happen soon. I think it'll mostly be a matter of removing accidental Unix-isms (like unnecessary use of symlinks) in the build scripts.

There's a very good OCaml binding: https://github.com/fdopen/uwt . It works really well in the networking component of the Docker for Mac and Windows desktop apps (see https://github.com/moby/vpnkit)

For those interested, some of the underlying libraries that make up Docker for Mac (and, I think, Windows) are written in OCaml (or have components written in OCaml): VPNKit[0], DataKit[1] and HyperKit[2] (qcow2 support is implemented in OCaml). 0: https://github.com/moby/vpnkit 1: https://github.com/moby/datakit 2: https://github.com/moby/hyperkit

Docker too. https://github.com/moby/datakit https://github.com/moby/vpnkit

"We explored various methods to make these new features work with sandboxing restrictions of the App Store, but it seems that this is not possible." I wonder if they tried using Docker's library/approach: https://github.com/docker/vpnkit

The DNS resolving code in Docker for Mac is in the VPNkit project which is open-source: https://github.com/docker/vpnkit. A DNS timeout is a fairly general symptom and it's hard to diagnose fully without a packet capture, but there's one issue that I'm aware of: if the primary server is down then the UDP DNS queries and responses will use the host's second server. However if a response is large and requires TCP then unfortunately we will still forward it to the primary server, which obviously won't work :( I've filed this issue about it: https://github.com/docker/vpnkit/issues/96. We hope to improve DNS, VPN and general proxy support for 1.13 -- please do file issues for any other bugs you find!

It's the latter. As we build up the Docker platform we're spinning out small individual components (the "plumbing") which other products can use and contribute back to. Here are a few of the components we have open-sourced recently: * https://github.com/docker/swarmkit * https://github.com/docker/hyperkit * https://github.com/docker/vpnkit * https://github.com/docker/datakit * https://github.com/docker/containerd * https://github.com/docker/notary * https://github.com/opencontainers/runc * https://github.com/docker/libnetwork * https://github.com/docker/libcompose