Karadul

Spec sheet

Product

Karadul is a self-hosted, WireGuard-compatible mesh VPN for peer-to-peer connections across NAT boundaries.Read 11 Oct 2026 · github.com

Intended users

The README recommends Karadul for people seeking self-hosting, a single binary without database dependencies, and control of their infrastructure and keys.Read 11 Oct 2026 · github.com

Platforms

The README provides installation instructions for macOS, Linux, Windows, and Docker; it says mobile support is planned.Read 11 Oct 2026 · github.com

Security

The project describes Noise IK, X25519, ChaCha20-Poly1305, and BLAKE2s among its cryptographic mechanisms.Read 11 Oct 2026 · github.com

Support

The project directs users to report bugs, test beta releases, or contribute through its GitHub repository.Read 11 Oct 2026 · github.com

License

The repository identifies Karadul as MIT licensed.Read 11 Oct 2026 · github.com

Access model

vpnRead 22 Sep 2026 · github.com

Admin control level

basicRead 22 Sep 2026 · github.com

Architecture

A single Go binary can run as a node, coordination server, or DERP relay, with no SaaS dependency.Read 11 Oct 2026 · github.com

Audit logs

NoRead 22 Sep 2026 · github.com

DNS

MagicDNS resolves mesh hostnames to virtual IPs, and upstream DNS queries can optionally use DNS-over-HTTPS.Read 11 Oct 2026 · github.com

Mobile support

The README marks mobile support as planned.Read 11 Oct 2026 · github.com

Network features

The README lists STUN and hole-punching NAT traversal, MagicDNS, ACL support, and exit nodes.Read 11 Oct 2026 · github.com

Networking

Features include STUN discovery, UDP hole punching, DERP relay fallback, subnet routing, and exit nodes.Read 11 Oct 2026 · github.com

Security limitation

The security policy identifies the project as beta and lists no built-in rate limiting, basic ACL controls, and no audit logging as limitations.Read 11 Oct 2026 · github.com

Security reporting

The security policy asks users to report vulnerabilities privately by email rather than opening a public issue.Read 11 Oct 2026 · github.com

Self-hosting

The project says users operate their own coordination server and DERP relays and control their keys, without relying on SaaS.Read 11 Oct 2026 · github.com

Site-to-site networking

YesRead 22 Sep 2026 · github.com

SSO / SCIM

NoRead 22 Sep 2026 · github.com

Supported platforms

Linux,macOS,WindowsRead 22 Sep 2026 · github.com

Vulnerability reports

The security policy asks researchers to email [email protected] and says it aims to acknowledge reports within 48 hours.Read 11 Oct 2026 · github.com

Web interface

The built-in web UI provides a dashboard, mesh topology graph, node and peer management, settings, and live WebSocket updates.Read 11 Oct 2026 · github.com

Where Specifiction places it

• Business VPN Software#79 of 947.3