I built a small experiment that creates a peer-to-peer tunnel between two Windows machines using the Wintun driver.
The tunnel uses UDP hole punching so two peers behind NATs can discover each other and communicate directly. Packets from the virtual interface are captured, encapsulated inside UDP, sent to the remote peer, and then injected back into the remote Wintun interface.
The repo contains a minimal STUN-like server and the peer implementation.
Tailpass is a Tailscale powered TCP port forwarding tool that bridges your VLANs, containers, and hosts simply and securely. You can easily connect web servers, SSH sessions, databases, or any TCP service across your network without worrying about complex configurations. Add your local and remote services, start the tunnel, and your traffic flows seamlessly through Tailscale. Tailpass gives you a lightweight dashboard, an efficient backend, and the freedom to access your services from anywhere.
Tailpass is a Tailscale powered TCP port forwarding tool that bridges your VLANs, containers, and hosts simply and securely. You can easily connect web servers, SSH sessions, databases, or any TCP service across your network without worrying about complex configurations. Add your local and remote services, start the tunnel, and your traffic flows seamlessly through Tailscale. Tailpass gives you a lightweight dashboard, an efficient backend, and the freedom to access your services from anywhere.
Wintun acts as a Layer 3 virtual adapter that allows user-space applications such as VPN software to directly work with IP packets. It functions as a TUN interface, creating a virtual network adapter that provides direct access to network layer (IP) packets through simple file read and write operations. Much like a physical network card, it supports assigning IP addresses, configuring routes, and transmitting data. The key difference is that, unlike real hardware, all packet transmission and handling are managed entirely by user-defined programs in user space.