The author presents Kith as a decentralized WireGuard mesh VPN that eliminates coordination servers by using signed ledgers for device management. A commenter raises security concerns regarding the lack of quorum and potential replay attacks, while suggesting Docker support to improve usability.
2 readable replies · Supporting reply 1 · Supporting reply 2naggie
dsnet
Go2020–2025
naggie / dsnet
dsnet
FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
3Distinct people
8Mentions
0Explicit recommenders
752GitHub stars
What to know before exploring
What it is
FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
Mentions over time
HN mentions by year8 dated mentions
Observed mentions: 2020-03-30 10:12:26 UTC to 2025-10-29 18:07:58 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
8 sourcesHOHowardStark·Oct 29, 2025
Nebula[0] addresses this and is IMO an improvement over WireGuard. Came out of Slack originally, and it supports peer discovery, NAT hole punching, and some other cool features. Also still uses the Noise Protocol.
In practice, the extra networking features + better first class peer config management baked in is very nice (Nebula’s “lighthouses” are configured with a tool similar to DSNet for Wireguard[1])
[0] https://github.com/slackhq/nebula
[1] https://github.com/naggie/dsnet
In Tailscale Peer RelaysDSNet for WireGuard VPN: Like wg-quick but even quicker
13 points · Open discussionI made this: https://github.com/naggie/dsnet/ -- a simple command to manage a wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
It's not distributed, however.
In Wiretrustee: WireGuard-Based Mesh NetworkNice article. I had been maintaining a few servers doing a similar thing, but found the peer management, address allocation and key creation to be a bit tedious after some time so I created a command, https://github.com/naggie/dsnet/ -- adds peers in one command with IPv6 and PSK support.
In WireGuard Bounce Server Setup> "Not as secure" means specifically this punts all the actual security of the system.
In my opinion, not quite; the peer private key only exists on the server for a short amount of time which somewhat mitigates the problem.
I agree it's not ideal but it is convenient, and a good balance for the average user in my opinion. I will support specifying a public key as part of the `add` command soon. See https://github.com/naggie/dsnet/issues/8 (also, see the FAQ)
Thanks for the feedback
In Show HN: Dsnet, a simple command to manage a centralised WireGuard VPNShow HN: Dsnet, a simple command to manage a centralised WireGuard VPN
69 points · Open discussionShameless plug time: those interested in subspace might want to check out a project of mine: dsnet https://github.com/naggie/dsnet/
dsnet is a simple wiregard management command that manages key generation and IP allocation, generating config files. I'm using it for a few networks at the moment.
I recently tried to add decent documentation and a blog post in the hope that it's useful to someone. I should so a Show HN really.
Here's the blog post: https://callanbryant.co.uk/blog/how-to-set-up-a-wireguard-vp...
In Subspace – A simple WireGuard VPN server GUII felt the same so I made https://github.com/naggie/dsnet -- just a simple CLI tool to add/remove peers, generating config.
In Linux 5.6