Blog Docs Roadmap GitHub

Enabling an Internet without borders

Wireleap is a decentralized communications protocol and open-source software designed with the goal of providing unrestricted access to the Internet from anywhere.

$ curl

United States

$ wireleap socks start

$ wireleap exec curl


$ wireleap reload

$ wireleap exec curl


$ wireleap config broker.circuit.whitelist $(__wireleap_relays | grep germany)

$ wireleap exec curl


At a glance

Wireleap is not exactly a VPN, and not exactly like TOR. It's kind of both, and kind of neither.

Multi-layered encryption
Traffic is encapsulated in layers of encryption and routed through a series of relays, each knowing only the required information to perform its job.
Single or multiple hops
Define the amount of hops you prefer in a circuit, less for lower latency, more for increased privacy.
Define your own circuit
By default relays are selected randomly based on the number of hops configured. Want to use a specific relay or series of relays? Don't want to use others for any reason? Define a whitelist.
Tunnel all system traffic
All traffic on the system (both TCP and UDP) can be tunneled through the connection broker using the TUN device, just like a regular VPN client.
Or tunnel only specific apps
Any application that supports the SOCKSv5 protocol can be configured to route its traffic through the connection broker. Have an app that doesn't support SOCKS? Intercept its socket connections.
Looks like regular traffic
Connections are encrypted, multiplexed and encapsulated into regular TLS HTTP/2 traffic. Regular connections to and relaying traffic via look pretty much identical.
No user accounts needed
Access to Wireleap networks is performed with accesskeys, used to cryptographically and independently generate tokens for relays to authorize service.
A powerful API
The client controller provides a REST API used by the CLI, but opens the door for GUI's, web frontends, browser extensions, router and custom integrations.
Open Source
Source code for the client and the relay is available on GitHub, and published under the MIT license. You can build from source, browse the code, and contribute.

# tunnel specific traffic (manually or wrapper scripts)

$ curl --proxy socks5h://$(wireleap config forwarders.socks.address) URL

$ wireleap exec git clone URL

$ wireleap exec chromium-browser [URL]

# tunnel network connections from arbitrary programs

$ wireleap intercept ssh USER@HOST

# tunnel all tcp/udp traffic on the system

$ wireleap tun start

$ firefox

# define the circuit that fits your needs

$ wireleap config broker.circuit.whitelist "wireleap://"

$ wireleap config broker.circuit.hops 1

Latest from the blog

View all posts »


Partial list of people advising the project.

Ladar Levison

Privacy and Technology Advisor

Founder, Lavabit

Arturo Filasto

Internet Measurement and Traffic Censorship Advisor

Project Lead at OpenObservatory (OONI)

Micah Anderson

Privacy and Technology Advisor

RiseUp Founder, Calyx Board Member

Derek Zimmer

Security and Privacy Advisor

Executive Director


Routing Layer Advisor

i2p Android Developer and Maintainer

Susan Sons

Research and Security Advisor

Chief Security Analyst, Indiana University Bloomington

Gael Duval

Integrations Advisor

President and Founder of /e/, Murena, and Mandrake Linux

Perry Kniest

Consumer VPN and Infrastructure Advisor

Founder and HostingKing

Joost Hoogendoorn

Consumer VPN and Infrastructure Advisor

Founder WifiMask VPN

I have worked on decentralized and privacy focused tech that supports internet rights, freedom, and personal data protection for years, and if Wireleap is going to try and solve the net neutrality issue, I want to help support it.

Gael Duval

Integrations Advisor

President and Founder of /e/, Murena, and Mandrake Linux

Technology stack

Currently under heavy development, and not yet feature complete

The technology stack is the result of a lengthy, ethically guided and thoroughly considered research endeavor. The design of which is largely made up of two parts working in synergy:

  1. A decentralized sustainable routing layer on the Internet that enforces net-neutrality based on collateral freedom, compartmentalized liability, increased privacy, and a sound economic model properly incentivizing network participation.
  2. A distributed value transfer protocol solving issues of payments and compensation validity by employing in-band compensation* but with out-of-band payment intermediaries between customers and service providers, defining service parameters, and facilitating with disbursement of funds provided by a customer to service providers proportionally for service provided, based on proof of service.

It's pretty fast, looks like regular HTTP/2 traffic, has multi-protocol support, multiplexed connections, onion encryption & routing and increased privacy.


Here be dragons! Rough sketch, subject to change.