Karadul
The facts below are what the maker publishes about Karadul, checked and dated. Our editors have not written about it yet.
The facts
Each one read from Karadul's own pages, with the date it was checked.
What it does
- Access model
- vpnchecked 22 Sep 2026
- Admin control level
- basicchecked 22 Sep 2026
- Architecture
- A single Go binary can run as a node, coordination server, or DERP relay, with no SaaS dependency.checked 11 Oct 2026
- Audit logs
- Nochecked 22 Sep 2026
- DNS
- MagicDNS resolves mesh hostnames to virtual IPs, and upstream DNS queries can optionally use DNS-over-HTTPS.checked 11 Oct 2026
- Intended users
- The README recommends Karadul for people seeking self-hosting, a single binary without database dependencies, and control of their infrastructure and keys.checked 11 Oct 2026
- License
- The repository identifies Karadul as MIT licensed.checked 11 Oct 2026
- Mobile support
- The README marks mobile support as planned.checked 11 Oct 2026
- Network features
- The README lists STUN and hole-punching NAT traversal, MagicDNS, ACL support, and exit nodes.checked 11 Oct 2026
- Networking
- Features include STUN discovery, UDP hole punching, DERP relay fallback, subnet routing, and exit nodes.checked 11 Oct 2026
- Product
- Karadul is a self-hosted, WireGuard-compatible mesh VPN for peer-to-peer connections across NAT boundaries.checked 11 Oct 2026
- Security
- The project describes Noise IK, X25519, ChaCha20-Poly1305, and BLAKE2s cryptography, and says it does not implement its own cryptography.checked 11 Oct 2026
- Security limitation
- The security policy identifies the project as beta and lists no built-in rate limiting, basic ACL controls, and no audit logging as limitations.checked 11 Oct 2026
- Security reporting
- The security policy asks users to report vulnerabilities privately by email rather than opening a public issue.checked 11 Oct 2026
- Self-hosting
- The project says users operate their own coordination server and DERP relays and control their keys, without relying on SaaS.checked 11 Oct 2026
- Site-to-site networking
- Yeschecked 22 Sep 2026
- SSO / SCIM
- Nochecked 22 Sep 2026
- Support
- The project directs users to report bugs, test beta releases, or contribute through its GitHub repository.checked 11 Oct 2026
- Vulnerability reports
- The security policy asks researchers to email [email protected] and says it aims to acknowledge reports within 48 hours.checked 11 Oct 2026
- Web interface
- The built-in web UI provides a dashboard, mesh topology graph, node and peer management, settings, and live WebSocket updates.checked 11 Oct 2026
Where it runs
- Platforms
- The README provides installation instructions for macOS, Linux, Windows, and Docker; it says mobile support is planned.checked 11 Oct 2026
- Supported platforms
- Linux,macOS,Windowschecked 22 Sep 2026
Alternatives to Karadul
- 1
Tailscale
Free planOpen sourceAndroidiOSWebAPI9.4From $1 a month - 2
Windscribe
Free planOpen sourceAndroidiOSWebExtension9.1From $3 a month - 3
NetBird
Free planAndroidiOSLinuxmacOS9.0From €6 a month - 4
Twingate
Free planAndroidiOSWebAPI8.9From $5 a month - 5
GoodAccess
Free planAndroidiOSWebLinux8.8Free plan - 6
ZeroTier
Free planAndroidiOSWebAPI8.8From $18 a month