VPN Fund

eduVPN app — Add Wireguard protocol to federated VPN suite

Let's Connect aims to provide a comprehensive and reliable, open source VPN solution for all platforms. For the codebase containing the Mac/iOS implementation of the EduVPN app a continuous integration setup is needed, which should be inspectable by the wider internet community and based on open and/or freely available tooling. Furthermore, the iOS and Mac apps of Let's Connect/EduVPN should rely on as few third party dependencies as possible - as such dependencies introduce risk, for example due to bugs or dependency poisoning. This project will set up the CI infrastructure and prune the dependency to reduce the attack surface on the app.

Read more about eduVPN app, eduVPN on Apple, eduVPN Accessibility & UX Improvements, eduVPN on Apple part II, eduVPN multi-protocol.

Let's Connect VPN provisioning — Preprovisioning VPN profiles for managed devices

Let’s Connect VPN (aka eduVPN) is a community-driven open source software initiative to help lead the way to reliable, performant and trustworthy VPN technologies. The project provides a full open-source VPN framework currently designed on top of OpenVPN and WireGuard. If organisations or communities are interested in deploying eduVPN in a large scale environment, it should be trivial to have the software pre-installed including credential rollout. This project will examine how to better, more easily, support large scale Let's Connect and EduVPN rollouts.

Read more about Let's Connect VPN provisioning.

eduP2P Test Suite — System, integration and performance tests for eduP2P

eduP2P is a peer-to-peer (P2P) VPN solution based on WireGuard. This project will develop a comprehensive test suite for eduP2P, consisting of three types of tests: system tests (that verify whether it is possible to establish P2P connections using eduP2P when the addresses of peers have undergone Network Address Translation), integration tests (that verify the functionality of smaller components of eduP2P in isolation by testing the source code), and performance tests (that measure metrics such as the throughput, delay and packet loss of an eduP2P connection).

The test suite makes the continued development of eduP2P easier by making it possible to discover and fix functionality and performance issues present in eduP2P.

Read more about eduP2P Test Suite.

VPN Vulnerability Testing Suite — Test VPN implementations for network based attacks

Recent publications have brought attention to vulnerabilities in most VPN implementations when faced with a network-based attacker levering attacks such as TunnelVision and TunnelCrack, among others. In light of these publications, this project develops a testing suite that covers every known edge case, allowing for a one-stop straightforward yet complete evaluation of whether a particular VPN client implementation is susceptible to said vulnerabilities.

The testing framework will be delivered as an open-source software component, free to be used and altered. The framework will also be extended with various attack variants that are not directly covered under the original TunnelCrack and TunnelVision research, such as behavior when operating on hostile IPv6 networks, and the recovery behavior after being subject to service interruption by an attacker. By integrating these tests into e.g. continuous integration and delivery infrastructure, developers of VPN applications can sustainably harden their software against these attacks.

Read more about VPN Vulnerability Testing Suite.