boringtun
« Back to VersTracker
Description:
Userspace WireGuard implementation in Rust
Type: Formula  |  Latest Version: 0.6.0@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  @cloudflare  |  formulae.brew.sh
Category: Networking
Tags: vpn wireguard networking rust security userspace
Install: brew install boringtun
About:
Boringtun is a high-performance, userspace implementation of the WireGuard VPN protocol written in Rust. It enables secure network tunneling without requiring kernel modules, making it ideal for environments where kernel access is restricted. The tool provides a robust alternative for deploying WireGuard on systems where traditional kernel integration isn't feasible.
Key Features:
  • Userspace WireGuard implementation in Rust
  • No kernel module required
  • High performance and memory safety
  • Command-line interface (boringtun-cli)
Use Cases:
  • Running WireGuard VPN on systems without kernel module support
  • Containerized VPN deployments where kernel access is limited
  • Cross-platform VPN solutions for macOS and Linux
Alternatives:
  • wireguard-go – Go-based userspace implementation; Boringtun offers Rust's memory safety and potentially better performance
  • kernel WireGuard – Native kernel implementation; Boringtun provides compatibility where kernel modules cannot be installed
License: BSD-3-Clause
Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, arm64_ventura, sonoma, ventura, arm64_linux, x86_64_linux
Important Notes:
boringtun-cli requires root privileges so you will need to run `sudo boringtun-cli utun`.
You should be certain that you trust any software you grant root privileges.
Version History
Detected Version Rev Change Commit