Show HN: BastionRoute – An outbound-initiated WebSocket relay fabric for UDP

Category: infrastructure

Tags: websocket, udp-relay, zero-trust

Score: 6.8/10 (Innovation: 7, Technical: 7, Documentation: 7, Utility: 6)

BastionRoute is a WebSocket relay fabric for UDP datagrams that routes traffic through outbound-only connections, eliminating the need for open inbound ports. It is interesting because it enables secure remote access to private networks (e.g., WireGuard) behind strict firewalls by leveraging zero-inbound architecture and handling UDP-over-TCP head-of-line blocking with non-blocking Go channels.

Target audience: network engineers, devops, security engineers

Repository: https://github.com/klauscam/BastionRoute · Go · Apache-2.0 · 6 stars

View on Hacker News