wirething-poc

This proof of concept uses the ntfy service, STUNTMAN and wireguard to connect without any login two devices behind NAT.

Dependencies

On macOS, install the packages below:

brew install bash gnupg stuntman wireguard-go wireguard-tools

Run the command below to see if anything is missing:

./wirething-poc.sh deps

Then download and unpack https://github.com/pufferffish/wireproxy/releases.

os="darwin"
arch="amd64"
version="v1.0.9"

wget "https://github.com/pufferffish/wireproxy/releases/download/${version}/wireproxy_${os}_${arch}.tar.gz"
tar -xzvf "wireproxy_${os}_${arch}.tar.gz"

Testing locally

# Terminal 1

ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"

WIREPROXY_SOCKS5_BIND="disabled" ./wirething-poc.sh cli new local alice
./wirething-poc.sh cli export local alice

WIREPROXY_SOCKS5_BIND="disabled" ./wirething-poc.sh cli new remote bob
./wirething-poc.sh cli export remote bob

./wirething-poc.sh cli add local ./bob.peer
./wirething-poc.sh cli add remote ./alice.peer

# Terminal 2

WT_STORE_ENABLED=true WT_DOMAIN=local ./wirething-poc.sh

# Terminal 3

WT_STORE_ENABLED=true WT_DOMAIN=remote ./wirething-poc.sh

Testing using two computers

# box01

ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"
export WIREPROXY_EXPOSE_PORT_LIST="22"

./wirething-poc.sh cli new wire alice
./wirething-poc.sh cli export wire alice

scp alice.peer box02:

# box02

ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"
export WIREPROXY_EXPOSE_PORT_LIST="22"

./wirething-poc.sh cli new wire bob
./wirething-poc.sh cli export wire bob

scp bob.peer box01:

# box01

./wirething-poc.sh cli add wire ~/bob.peer
WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh

# box02

./wirething-poc.sh cli add wire ~/alice.peer
WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh

SOCKS5

# box01

./wirething-poc.sh cli peer address wire bob
bob_address="$(./wirething-poc.sh cli peer address wire bob)"
ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:1080 %h %p' "${USER}@${bob_address}"

# box02

./wirething-poc.sh cli peer address wire alice
alice_address="$(./wirething-poc.sh cli peer address wire alice)"
ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:1080 %h %p' "${USER}@${alice_address}"

Tunnel

Using box01 as example, first get <bob_address> using the command ./wirething-poc.sh cli peer address wire bob, then edit the file ~/.wirething/wire/v1/env and change

WIREPROXY_FORWARD_PORT_LIST=""

to

WIREPROXY_FORWARD_PORT_LIST="8022:<bob_address>:22"

Then run in one terminal

WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh

and in another

ssh  -p 8022 "${USER}@127.0.0.1"