Show HN: Chained VPN routing lab with Linux netns, veth, and iptables

1 darksunstealth 0 5/17/2025, 8:04:21 AM github.com ↗

I built a chained VPN lab to support multi-user traffic isolation using only raw Linux tools.

Each user gets:

- A WireGuard tunnel - A dedicated namespace (wg-$user) bridged via veth - NAT and routing table override - A second namespace (ovpn-$user) running OpenVPN - Final egress through tun1

The entire setup is controlled with bash scripts and PostgreSQL — no Docker, no containers, no Python, just raw netns, iptables, ip rule and shell.

Built for GDPR-compliant VPN infra with real isolation per collaborator.

Code and README: https://github.com/darksunstealth/multi-vps-routing

Would love feedback — this was one of the most complex and satisfying systems I’ve built in pure Linux.

Spent weeks building, not marketing

Meta argues enshittification isn't real in bid to toss FTC monopoly case (arstechnica.com)

Whodunit? 'Unauthorized' change to Grok made it blather on about White genocide (theregister.com)

Life before the web – Running a Startup in the 1980's (blog.zamzar.com)

Malware hidden inside NPM with invisible Unicode and Google Calendar invites [video] (youtube.com)

GlobalWafers to invest 4B dollars in wafer manufacturing in the USA (tomshardware.com)

TCP/IP over bongo drums (2003) (web.archive.org)

ChatGPT is getting an AI coding agent (theverge.com)

Modular LLM Security Framework for Enterprise Use (Risk, Logging, Compliance) (github.com)

Narwhals: Unified DataFrame Functions for Pandas, Polars, and PySpark (codecut.ai)

Don't Use ISO/IEC 14977:1996 Extended Backus-Naur Form (EBNF) (2023) (dwheeler.com)

ZimaBoard 2 micro server: Intel N150, dual SATA, dual 2.5GbE, PCIe slot, miniDP (cnx-software.com)

Bulk URL Opener (chromewebstore.google.com)

NASA resurrects Voyager 1 interstellar spacecraft's thrusters after 20 years (space.com)

A Critical Look at "A Critical Look at MCP." (docs.mcp.run)

You do not need NixOS on the desktop (aruarian.dance)

I Revived Pkgsrc on AIX (briancallahan.net)

Show HN: 3D Ising Model Simulation – interactive web-based Monte Carlo simulator (ising-model.vercel.app)

Multi-tenant SaaS data modeling (2024) (flightcontrol.dev)

Identifying almost any x86 CPU (2004) (web.archive.org)

Show HN: Chained VPN routing lab with Linux netns, veth, and iptables (github.com)

Implementing a RISC-V Hypervisor (seiya.me)

OpenAI Codex Coding Agent (openai-codex.dev)

The Convenience of Mathematica Image Processing (2008) (blog.wolfram.com)

Women's Pockets are Inferior. (2018) (pudding.cool)

The value of llms.txt: Hype or real? (mintlify.com)

Another Unblocked Games Site! (playunb.com)

Paynic – Intuitive Invoicing for Businesses and Freelancers (paynic.vercel.app)

Mexico accuses MrBeast of exploiting Mayan pyramids (bbc.co.uk)

Are developers falling out of love with Apple? (brucelawson.co.uk)

Catalog of Novel Operating Systems (github.com)

Can we still love Apple? Should we ever have? (sixcolors.com)

Woman in viral transparent "phone" video reveals truth about mysterious product (dexerto.com)

Publish Python packages hassle free (ash-01xor.github.io)

Ask HN: Conversational AI to Learn a Language

Why bad philosophy is stopping progress in physics (nature.com)

Publisher: The Malloy Semantic Model Server (github.com)

Ask HN: Is it new for AI to prompt you, and also fill its replies with emoji's?

Can Apple extricate itself from China? (economist.com)

Ørsted halts work on UK wind farm citing rising costs (ft.com)

I let lasers power my smart home – and I don't want to go back (theverge.com)

Schools are digging underground for their heat – and saving money (msn.com)

Build and Use PostgreSQL 18 (Beta) from Git on Ubuntu Linux 24.04 LTS (privateisland.tech)

People's experiences with approaches to multitenancy (2020) (blog.arkency.com)

Multi-Tenant Data Architecture (2006) (web.archive.org)

Promise to Kill DEI, and Trump's FCC Will Approve Anything (gizmodo.com)

Chrome extension to chat with anyone on any website (chromewebstore.google.com)

Fortnite unavailable on iPhones globally after Apple rejects App Store release (theguardian.com)

Controversial dentist Mike Mew on how 'mewing' can make you more attractive (theguardian.com)

Building an eBPF/Rust Tool for Easier SoC 2 Audit Data Collection – Thoughts?

Show HN: Chained VPN routing lab with Linux netns, veth, and iptables

Comments (0)