GotaTun – Mullvad's WireGuard Implementation in Rust (mullvad.net)

Article summary

Mullvad VPN has announced GotaTun, a WireGuard implementation written in Rust, which aims to be fast, efficient, and reliable. GotaTun is a fork of the BoringTun project from Cloudflare and has been rolled out to Android users, with plans to release it on other platforms next year. The new implementation has already shown a significant reduction in crash rates and improved performance. GotaTun includes features like DAITA and Multihop, and is designed to provide better privacy and security for users.

Main themes

• WireGuard implementation
• Rust programming language
• VPN security
• Protocol development
• Performance optimization
• Open-source software

What commenters say

• Having multiple implementations of the same protocol can improve security by reducing the impact of bugs and vulnerabilities.
• Duplicating efforts by creating a new implementation instead of contributing to an existing one can be seen as a waste of resources.
• The use of Rust in GotaTun provides better performance and security compared to other programming languages like Go.
• The development of GotaTun as a separate implementation rather than building on top of an existing one allows for more control and flexibility.
• Multiple implementations of a protocol can lead to a larger attack surface, but this can be mitigated by the fact that each implementation only affects a fraction of the total user base.
• The choice of programming language for a project like GotaTun depends on factors like performance requirements, memory constraints, and the need for predictable timings.
• The use of user namespaces and network namespaces can provide a secure way to isolate applications and restrict their access to the network.
• The development of protocols like WireGuard should focus on providing a simple and secure tunneling solution, rather than trying to obfuscate traffic or evade government or ISP blocks.