https://github.com/cylonix/cylonix

Fully open sourced client app alternative to Tailscale
https://github.com/cylonix/cylonix

mesh-vpn network sase security tailscale vpn wireguard ztna

Last synced: 2 months ago
JSON representation

Fully open sourced client app alternative to Tailscale

• Host: GitHub
• URL: https://github.com/cylonix/cylonix
• Owner: cylonix
• License: bsd-3-clause
• Created: 2025-06-02T18:37:40.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2026-03-31T09:48:53.000Z (2 months ago)
• Last Synced: 2026-03-31T11:39:39.694Z (2 months ago)
• Topics: mesh-vpn, network, sase, security, tailscale, vpn, wireguard, ztna
• Language: Dart
• Homepage: https://cylonix.io
• Size: 7.35 MB
• Stars: 32
• Watchers: 1
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Agents: AGENTS.md

Awesome Lists containing this project

README

          
# Cylonix

![Cylonix](./landing.jpeg)

Cylonix is an open source client application for the Cylonix Secure Access Service Edge (SASE) service. On devices, it runs a modified version of Tailscale™ (WireGuard-based mesh VPN) to provide secure, private connectivity. This respository is the client app.

## System Diagram

Please refer to [System Architecture](./system.md) for details.

![System](./system.svg)

## Features

- Exit Node as a Service  

  Terminate your WireGuard mesh on a privacy-first infrastructure.  

- Data Privacy  

  End-to-end encryption using WireGuard ensures your traffic remains confidential.  

- Optional Enterprise Security  

  - Cilium-based firewall for fine-grained network policy enforcement  

  - VPP-based policy routing engine for high-performance traffic steering  

- Lightweight by Default  

  Most users need only the WireGuard mesh network; enterprise users can layer on Cilium and VPP for advanced control.

## Architecture

1. WireGuard mesh network termination  

2. (Enterprise only) Cilium firewall integration  

3. (Enterprise only) VPP policy routing engine

The default WireGuard mesh is sufficient for secure peer-to-peer connectivity. Enterprises can enable Cilium and VPP components to enforce security policies and route traffic at scale.

## Getting Started

- Check out [Cylonix sub-reddit](https://www.reddit.com/r/cylonix/) for discussions or help.

- Check out [Download Page](https://cylonix.io/web/view/cylonix/download.html) to download prebuit binaries for the client app.

- Check out [INSTALL.md](./INSTALL.md) for build and configuration instructions to build the client app.

## License

Cylonix is licensed under the BSD 3-Clause License.  

Contributions welcome! See [CONTRIBUTING.md](docs/CONTRIBUTING.md).

## Trademarks

“Tailscale” is a trademark of Tailscale Inc.  

“WireGuard” is a registered trademark of Jason A. Donenfeld.

"Cilium" is a registered trademark of Isovalent Inc.

All other trademarks are property of their respective owners.