Self hosted p2p tunnel or VPN

Hello everyone,

I’m currently looking for the ideal solution that meets several criteria that I’ll mention below. I’ve done a lot of research and found many things but each time with a technical detail that means I can’t use it.

If I’m not in the right place to ask this question, please don’t hesitate to point me in the right direction, thank you :slight_smile:

Here’s what I’m trying to do: I manage a group of gamers and we play video games on a regular basis, usually on LANs. We currently use RadminVPN, but a lot of players forget to disable it, and sometimes we have people coming in, connecting to our network and trying to connect to players’ machines by exploiting vulnerabilities.

So I’d like to find a command-line solution to launch a VPN/Tunnel that supports broadcasting, as most games work this way to allow players in the network to find the game in progress.

I understand that you need a virtual network card to do this, but some do it with tunnels, but I’ve only found one under linux or limited to TCP, where all games use UDP.

Does the tool of my dreams exist? Here’s the list of constraints:

-Client under Windows (the server can be under Linux, which doesn’t be a problem for me)

-Must manage TCP and UDP (even if I have to create a configuration file to specify which port uses which protocol).

-No unique certificate per user, a simple passphrase would be ideal

-Ability to control everything from the command line, so that via a launcher (we were using Playnite with LanCommander), the connection can be established via a powershell script just before the game, and disconnected once the game is closed, without user intervention.

Thanks for your feedback

Not sure if it’s going to check all of your boxes but ZeroTier with a self-hosted controller works wonders, and if you want a GUI to manage the backend you could look into using ztncui from Key Networks.

netbird … self-hosted or not… it’s very good

Won’t the dream tool have the same problem as RadminVPN?

No unique certificate per user, a simple passphrase would be ideal

If you set a minimum password limit and watch out for bruteforce attempts. Otherwise people will use password “123” and it will be broken into right away.

Thanks, I will have a look, very interesting!

Netbird is built over wireguard, and wireguard not support broadcast.

I would like my players don’t have to do anything, with auto deconnection that is not possible with RadminVPN