Show HN: BastionRoute – A zero trust network access with zero inbound ports

Category: infrastructure

Tags: zero-trust, network-relay, websocket-tunnel

Score: 6.3/10 (Innovation: 6, Technical: 7, Documentation: 7, Utility: 5)

BastionRoute implements a zero-trust network access solution that uses outbound-only WebSocket connections to relay UDP traffic without opening any inbound ports. It is interesting for its clever reversal of traditional VPN topology to achieve a dark network edge, and its use of non-blocking Go channels to avoid TCP meltdown when tunneling UDP.

Target audience: backend devs, devops, security engineers

Repository: https://github.com/klauscam/BastionRoute · Go · Apache-2.0 · 5 stars

View on Hacker News