xiringuito

xiringuito creates a virtual private network by leveraging SSH tunnels, allowing traffic to be routed through a remote SSH server without the need for dedicated VPN infrastructure. Users specify the SSH host and one or more network prefixes, and the tool sets up a tun/tap interface that forwards packets over the encrypted SSH connection. It runs on Linux or macOS, requires local and remote sudo privileges, and can be installed globally via a simple make command.

The utility is aimed at developers, system administrators, and anyone who needs ad‑hoc network access to remote subnets, especially when dealing with protocols that are difficult for typical SSH‑based VPNs. It supports RTP, low‑level IP protocols such as OSPF, L2TP, PPP, IGMP, IPSec, ARP, and can manage multiple simultaneous tunnels as long as their routes do not overlap. A helper script, xaval, simplifies connection management, and an optional discover‑routes script can generate route lists automatically.

Unlike comparable tools that depend on Python, xiringuito is implemented as a compiled binary and relies only on standard Unix utilities. This makes it suitable for environments where Python is unavailable or undesired, while still providing transparent handling of UDP‑based and non‑TCP/UDP traffic through the SSH tunnel.