This proof of concept uses the ntfy service, STUNTMAN and wireguard to connect without any login two devices behind NAT.
On macOS, install the packages below:
brew install bash gnupg stuntman wireguard-go wireguard-tools
Run the command below to see if anything is missing:
./wirething-poc.sh deps
Then download and unpack https://github.com/pufferffish/wireproxy/releases.
os="darwin"
arch="amd64"
version="v1.0.9"
wget "https://github.com/pufferffish/wireproxy/releases/download/${version}/wireproxy_${os}_${arch}.tar.gz"
tar -xzvf "wireproxy_${os}_${arch}.tar.gz"
# Terminal 1
ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"
WIREPROXY_SOCKS5_BIND="disabled" ./wirething-poc.sh cli new local alice
./wirething-poc.sh cli export local alice
WIREPROXY_SOCKS5_BIND="disabled" ./wirething-poc.sh cli new remote bob
./wirething-poc.sh cli export remote bob
./wirething-poc.sh cli add local ./bob.peer
./wirething-poc.sh cli add remote ./alice.peer
# Terminal 2
WT_STORE_ENABLED=true WT_DOMAIN=local ./wirething-poc.sh
# Terminal 3
WT_STORE_ENABLED=true WT_DOMAIN=remote ./wirething-poc.sh
# box01
ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"
export WIREPROXY_EXPOSE_PORT_LIST="22"
./wirething-poc.sh cli new wire alice
./wirething-poc.sh cli export wire alice
scp alice.peer box02:
# box02
ln -nfs "<unpacked_path>/wireproxy" ./wireproxy
export WIREPROXY_COMMAND="${PWD}/wireproxy"
export WIREPROXY_EXPOSE_PORT_LIST="22"
./wirething-poc.sh cli new wire bob
./wirething-poc.sh cli export wire bob
scp bob.peer box01:
# box01
./wirething-poc.sh cli add wire ~/bob.peer
WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh
# box02
./wirething-poc.sh cli add wire ~/alice.peer
WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh
# box01
./wirething-poc.sh cli peer address wire bob
bob_address="$(./wirething-poc.sh cli peer address wire bob)"
ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:1080 %h %p' "${USER}@${bob_address}"
# box02
./wirething-poc.sh cli peer address wire alice
alice_address="$(./wirething-poc.sh cli peer address wire alice)"
ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:1080 %h %p' "${USER}@${alice_address}"
Using box01 as example, first get <bob_address> using the command
./wirething-poc.sh cli peer address wire bob, then edit the file
~/.wirething/wire/v1/env and change
WIREPROXY_FORWARD_PORT_LIST=""
to
WIREPROXY_FORWARD_PORT_LIST="8022:<bob_address>:22"
Then run in one terminal
WT_STORE_ENABLED=true WT_DOMAIN=wire ./wirething-poc.sh
and in another
ssh -p 8022 "${USER}@127.0.0.1"