Tunl

Tunl

Tunl is a native macOS client for the WireGuard® VPN protocol.

It exists because of one failure. A tunnel reports connected while nothing gets through: a peer drops, a server's upstream dies, an endpoint moves house. WireGuard doesn't notice, and neither does the menu-bar icon.

Tunl watches the handshake and the byte counters. When a tunnel stalls it says so, and it can re-resolve the endpoint and bring the thing back on its own. That watchdog lives inside the tunnel itself, so it keeps working while the app is closed.

What it does

It's built on Apple's Network Extension framework and the audited WireGuardKit library, so it runs sandboxed. No root access, no background daemons, no command line. No accounts and no telemetry either: Tunl talks to the VPN server you configure and to nothing else.

Bring your own WireGuard server, or any provider that hands you a .conf file. Don't have a server? The setup guide gets you from a bare VPS to a working tunnel, and covers locking the machine down afterwards.

See the privacy policy, or the support page if something isn't working.