CloudGateway
Multi-region WireGuard VPN service
Built a multi-region WireGuard mesh VPN with IPv4/IPv6 tunnels, a React dashboard, native Swift iOS and macOS clients, and a CLI for macOS and Linux. The backend uses FastAPI, Firebase authentication, and Terraform-managed Oracle Cloud infrastructure.
Web and native clients
Developed the web dashboard, native iOS and macOS clients, and CLI. The macOS app and CLI share authentication, client inventory, and connection state.
Regional infrastructure
Terraform-managed OCI hosts run regional WireGuard servers. FastAPI handles the control plane, with Firebase Auth and Firestore managing accounts, clients, and desired peer state.
Access control and regional networking
Account-scoped ACLs isolate clients across regions, while a WireGuard mesh connects authorized devices. Ad blocking and DNS-over-TLS forwarding handle DNS traffic. Cloudflare and Caddy front the regional APIs.
CloudLaunch origins
CloudGateway grew from CloudLaunch, my AWS deployment platform. CloudLaunch automated regional network setup, AMI distribution, server deployment, and resource cleanup, using a WireGuard VPN as its example product.
View CloudLaunchScreenshots
CLICK TO EXPAND

