Repo brief: erebe/wstunnel

Generated by RepoPilot · document generated 2026-09-13 · concise human review Evidence snapshot · analyzed 2026-09-13T01:29:36.235Z · commit db10b1aa0cd6

Verdict

Mixed — Single-maintainer risk — review before adopting

• Last commit 3d ago
• 8 active contributors
• BSD-3-Clause licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

wstunnel is a Rust-based tunneling tool that encapsulates arbitrary TCP/UDP traffic inside WebSocket or HTTP2 frames to bypass firewalls and DPI (Deep Packet Inspection). It acts as both a server and client, supporting static port forwarding, dynamic SOCKS5/HTTP proxies, transparent proxies, and reverse tunneling—allowing users to securely access restricted resources through permissive HTTP/HTTPS channels. Monorepo with two workspace members: wstunnel/src/ contains the core tunnel logic (config.rs, embedded_certificate.rs), and wstunnel-cli/src/main.rs wraps it as a CLI. Build artifacts are managed via Cross.toml (cross-compilation), .cargo/config.toml (Rust-specific), and…

Start here

• wstunnel/src/config.rs: Defines tunnel configuration parsing and validation; any new tunnel mode or flag starts here
• wstunnel/src/embedded_certificate.rs: Handles TLS/mTLS certificate loading and auto-reload; critical for security…
• wstunnel-cli/src/main.rs: CLI entry point and argument dispatch; must be updated for new user-facing features
• Cargo.toml: Workspace and dependency root; shows which crates are available and resolver version (3)
• .github/workflows/release.yaml: CI/CD pipeline for building and releasing static binaries; defines supported target…

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/erebe/wstunnel.git
cd wstunnel
cargo build --release
./target/release/wstunnel-cli --help

For cross-compilation: cross build --release --target x86_64-unknown-linux-gnu.

Daily commands:

Development: cargo run --bin wstunnel-cli -- [args]. For server tunnel: ./wstunnel-cli --listen ws://0.0.0.0:8080. For client: ./wstunnel-cli --forward tcp://127.0.0.1:22 ws://remote-server:8080. Full examples in…

…shortened for this brief.

Key cautions & unknowns

• Single-maintainer risk — top contributor 90% of recent commits
• 1. Certificate auto-reload is mentioned but auto-reload polling/notification mechanism not visible—check embedded_certificate.rs for file watch logic. 2. Cross-compilation via Cross.toml is required for some targets;…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.