Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
frappe
/
atlas
Public
Notifications
You must be signed in to change notification settings
Fork
16
Star
31
Code
Issues
41
Pull requests
4
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
feat(wireguard-gateway): Add WireGuard gateway for tenant VMs
- #289
#289
Closed
20vikash
wants to merge 69 commits into
frappe:develop
frappe/atlas:develop
from
20vikash:wireguard
20vikash/atlas:wireguard
Copy head branch name to clipboard
Conversation
Commits
69
(69)
Checks
Files changed
Closed
feat(wireguard-gateway): Add WireGuard gateway for tenant VMs
#289
20vikash
wants to merge 69 commits into
frappe:develop
frappe/atlas:develop
from
20vikash:wireguard
20vikash/atlas:wireguard
Copy head branch name to clipboard
Commits
Commits on Sep 24, 2026
feat(wg-gateway): Add WireGuard gateway service package
Show description for b81f9b0
20vikash
committed
b81f9b0
View commit details
Copy full SHA for b81f9b0
Browse repository at this point
feat(wg-gateway): Add gateway control-plane core
Show description for 574f62d
20vikash
committed
574f62d
View commit details
Copy full SHA for 574f62d
Browse repository at this point
feat(wg-gateway): Add WireGuard Gateway Server and Peer doctypes
Show description for f8278ec
20vikash
committed
f8278ec
View commit details
Copy full SHA for f8278ec
Browse repository at this point
feat(wg-gateway): Wire gateway package publishing and provisioning
Show description for 007108a
20vikash
committed
007108a
View commit details
Copy full SHA for 007108a
Browse repository at this point
fix(wg-mesh): Bound the NDP payload length for the verifier
Show description for 1fb8889
20vikash
committed
1fb8889
View commit details
Copy full SHA for 1fb8889
Browse repository at this point
Commits on Sep 25, 2026
feat(wg-gateway): Load WireGuard and netfilter modules at install
Show description for bdba0ef
20vikash
committed
bdba0ef
View commit details
Copy full SHA for bdba0ef
Browse repository at this point
feat(wg-gateway): Drop tc/BPF modules, only WireGuard and nftables
Show description for c7553a0
20vikash
committed
c7553a0
View commit details
Copy full SHA for c7553a0
Browse repository at this point
Merge remote-tracking branch 'upstream/develop' into develop
Show description for 996e727
20vikash
committed
996e727
View commit details
Copy full SHA for 996e727
Browse repository at this point
fix(wg-gateway): commit gateway before VM placement
20vikash
committed
cabfcd8
View commit details
Copy full SHA for cabfcd8
Browse repository at this point
fix(atlas): refuse a package download URL without a File
20vikash
committed
05c276f
View commit details
Copy full SHA for 05c276f
Browse repository at this point
fix(wg-gateway): fail gateways that lose placement or their virtual machine
20vikash
committed
a073365
View commit details
Copy full SHA for a073365
Browse repository at this point
fix(wg-gateway): allow the mesh address save after virtual machine creation
20vikash
committed
2730669
View commit details
Copy full SHA for 2730669
Browse repository at this point
fix(wg-gateway): restore the doctype field list indentation
20vikash
committed
8dac1eb
View commit details
Copy full SHA for 8dac1eb
Browse repository at this point
refactor(wg-gateway): build the virtual machine request once
20vikash
committed
26d07ea
View commit details
Copy full SHA for 26d07ea
Browse repository at this point
fix(wg-gateway): Use binary names instead of path in setup.sh
20vikash
committed
84b1409
View commit details
Copy full SHA for 84b1409
Browse repository at this point
refactor(wg-gateway): carry the interface section in peers.conf
20vikash
committed
6e2d308
View commit details
Copy full SHA for 6e2d308
Browse repository at this point
fix(wg-gateway): drop the unneeded network gateway role and IPv6 route
20vikash
committed
b86734d
View commit details
Copy full SHA for b86734d
Browse repository at this point
fix(wg-gateway): drop the unused default IPv6 route and REGION_ID
20vikash
committed
afa9eb7
View commit details
Copy full SHA for afa9eb7
Browse repository at this point
fix(wg-gateway): fit customer tunnel packets inside the mesh MTU
20vikash
committed
8f4247e
View commit details
Copy full SHA for 8f4247e
Browse repository at this point
fix(wg-gateway): accept form string tenant and client IDs in peer calls
20vikash
committed
16d9203
View commit details
Copy full SHA for 16d9203
Browse repository at this point
feat(wg-gateway): add the standalone gateway API daemon
20vikash
committed
0de6a52
View commit details
Copy full SHA for 0de6a52
Browse repository at this point
feat(wg-gateway): install and start the gateway API daemon
20vikash
committed
ea87d99
View commit details
Copy full SHA for ea87d99
Browse repository at this point
feat(wg-gateway): add the gateway API token field
20vikash
committed
7c64748
View commit details
Copy full SHA for 7c64748
Browse repository at this point
feat(wg-gateway): pass the daemon credential to the installer
20vikash
committed
75274be
View commit details
Copy full SHA for 75274be
Browse repository at this point
feat(wg-gateway): map the gateway hostname in the proxy site map
20vikash
committed
6a1f357
View commit details
Copy full SHA for 6a1f357
Browse repository at this point
feat(wg-gateway): read the public key from the daemon through the proxy
20vikash
committed
0f85ca6
View commit details
Copy full SHA for 0f85ca6
Browse repository at this point
feat(wg-gateway): issue the daemon token and return the Central bundle
20vikash
committed
f606a14
View commit details
Copy full SHA for f606a14
Browse repository at this point
feat(wg-gateway): require an Active Proxy Server before creation
20vikash
committed
3654b5c
View commit details
Copy full SHA for 3654b5c
Browse repository at this point
feat(wg-gateway): remove the proxy route before archiving
20vikash
committed
e201939
View commit details
Copy full SHA for e201939
Browse repository at this point
refactor(wg-gateway): drop the Atlas peer sync entry point
20vikash
committed
29a0e81
View commit details
Copy full SHA for 29a0e81
Browse repository at this point
refactor(wg-gateway): remove the Atlas peer module
20vikash
committed
3e49fc8
View commit details
Copy full SHA for 3e49fc8
Browse repository at this point
test(wg-gateway): cover the proxy route and daemon key read
20vikash
committed
00921b1
View commit details
Copy full SHA for 00921b1
Browse repository at this point
refactor(wg-gateway): remove the WireGuard Gateway Peer doctype
20vikash
committed
4cb04b0
View commit details
Copy full SHA for 4cb04b0
Browse repository at this point
refactor(wg-gateway): remove the Sync Peers desk button
20vikash
committed
c7adeac
View commit details
Copy full SHA for c7adeac
Browse repository at this point
docs(wg-gateway): document the daemon API and its service units
20vikash
committed
78ad0b2
View commit details
Copy full SHA for 78ad0b2
Browse repository at this point
docs(wg-gateway): describe the daemon phases and peer API
20vikash
committed
4c5c8b1
View commit details
Copy full SHA for 4c5c8b1
Browse repository at this point
docs(service): record the gateway daemon in the module rules
20vikash
committed
058e35b
View commit details
Copy full SHA for 058e35b
Browse repository at this point
feat(wg-gateway): add the gateway daemon package with JWKS authentication
20vikash
committed
b2534e5
View commit details
Copy full SHA for b2534e5
Browse repository at this point
feat(wg-gateway): add the daemon token audience
20vikash
committed
718f72e
View commit details
Copy full SHA for 718f72e
Browse repository at this point
feat(wg-gateway): authenticate the daemon with regional tokens
20vikash
committed
90ddcbd
View commit details
Copy full SHA for 90ddcbd
Browse repository at this point
feat(wg-gateway): install the daemon in its own python environment
20vikash
committed
1efa555
View commit details
Copy full SHA for 1efa555
Browse repository at this point
feat(wg-gateway): return the audience instead of a stored secret
20vikash
committed
bede9cc
View commit details
Copy full SHA for bede9cc
Browse repository at this point
test(wg-gateway): cover the token minting and public health check
20vikash
committed
de28054
View commit details
Copy full SHA for de28054
Browse repository at this point
docs(wg-gateway): describe the token model
20vikash
committed
864cad0
View commit details
Copy full SHA for 864cad0
Browse repository at this point
docs(wg-gateway): document the gateway audience
20vikash
committed
67f4f97
View commit details
Copy full SHA for 67f4f97
Browse repository at this point
fix(wg-gateway): serve the daemon on the proxy site port
20vikash
committed
ed5fbe3
View commit details
Copy full SHA for ed5fbe3
Browse repository at this point
fix(wg-gateway): pass the JWKS issuers comma-separated
20vikash
committed
3d680cd
View commit details
Copy full SHA for 3d680cd
Browse repository at this point
feat(wg-gateway): add the gateway to the service sidebar
20vikash
committed
a7552fc
View commit details
Copy full SHA for a7552fc
Browse repository at this point
fix(sidebar): add explicit Service sidebar so the gateway shows up
20vikash
committed
5c74192
View commit details
Copy full SHA for 5c74192
Browse repository at this point
chore: drop sidebar patch and the inert Sidebar JSON fixture
Show description for d70edb7
20vikash
committed
d70edb7
View commit details
Copy full SHA for d70edb7
Browse repository at this point
Revert "chore: drop sidebar patch and the inert Sidebar JSON fixture"
Show description for 0d9551f
20vikash
committed
0d9551f
View commit details
Copy full SHA for 0d9551f
Browse repository at this point
chore: remove the inert sidebar JSON fixture
Show description for 68251d3
20vikash
committed
68251d3
View commit details
Copy full SHA for 68251d3
Browse repository at this point
Revert "chore: remove the inert sidebar JSON fixture"
Show description for a8157c5
20vikash
committed
a8157c5
View commit details
Copy full SHA for a8157c5
Browse repository at this point
fix(test-proxy): stub the package download URL in the installed-package test
Show description for a3dfbc0
20vikash
committed
a3dfbc0
View commit details
Copy full SHA for a3dfbc0
Browse repository at this point
docs: correct the WG gateway spec and list the service where it belongs
Show description for a7469b2
20vikash
committed
a7469b2
View commit details
Copy full SHA for a7469b2
Browse repository at this point
test(artifacts): drop the missing-File case, an empty file_url covers it
20vikash
committed
42b2d75
View commit details
Copy full SHA for 42b2d75
Browse repository at this point
Merge branch 'develop' into wireguard
20vikash
authored
76792be
View commit details
Copy full SHA for 76792be
Browse repository at this point
Commits on Oct 1, 2026
feat(metal): Scope WireGuard gateway routes to the VM namespace
Show description for 97ccff8
20vikash
committed
97ccff8
View commit details
Copy full SHA for 97ccff8
Browse repository at this point
feat(wg-gateway): Filter gateway traffic with tc eBPF programs
Show description for 012860e
20vikash
committed
012860e
View commit details
Copy full SHA for 012860e
Browse repository at this point
feat(atlas): Provision the WireGuard gateway as a network gateway
Show description for a180696
20vikash
committed
a180696
View commit details
Copy full SHA for a180696
Browse repository at this point
feat(atlas): Sync WireGuard gateway routes in the server sync
Show description for 0d12363
20vikash
committed
0d12363
View commit details
Copy full SHA for 0d12363
Browse repository at this point
feat(atlas): Show WireGuard gateway access as virtual VM fields
Show description for ee0c62f
20vikash
committed
ee0c62f
View commit details
Copy full SHA for ee0c62f
Browse repository at this point
docs(wg-gateway): Describe the WireGuard gateway return path
20vikash
committed
bd8307d
View commit details
Copy full SHA for bd8307d
Browse repository at this point
refactor(metal): Shorten gateway route comments and trim tests
20vikash
committed
208d8a5
View commit details
Copy full SHA for 208d8a5
Browse repository at this point
refactor(atlas): Shorten gateway route comments and trim tests
20vikash
committed
71fc634
View commit details
Copy full SHA for 71fc634
Browse repository at this point
Merge branch 'develop' into wireguard
20vikash
authored
3e65acb
View commit details
Copy full SHA for 3e65acb
Browse repository at this point
test(atlas): Drop the standalone route scope tests
20vikash
committed
3f4fe27
View commit details
Copy full SHA for 3f4fe27
Browse repository at this point
fix(metal): Format the synced route responses
20vikash
committed
421f163
View commit details
Copy full SHA for 421f163
Browse repository at this point
fix(wg-gateway): Suppress the audited filesystem access
20vikash
committed
79240fb
View commit details
Copy full SHA for 79240fb
Browse repository at this point
You can’t perform that action at this time.
