Skip to content
Firezone Launches Sanstun: New Sans-IO WireGuard Implementation

Firezone Launches Sanstun: New Sans-IO WireGuard Implementation

First seen 31 Oct 2026, 05:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 31, 2026 at 09:42 UTC
  • •Sanstun is a new sans-IO implementation of WireGuard by Firezone.
  • •It is designed for high performance with no internal buffering.
  • •The library requires an event loop for functionality and does not handle I/O operations.

Firezone has announced the launch of Sanstun, a sans-IO implementation of the WireGuard protocol, designed for performance and ease of use. This new library is a fork of BoringTun, which has been deprecated in favor of Sanstun. The Sanstun project aims to maximize throughput while ensuring safe usage, featuring no internal buffering and a multi-core friendly API. It is fully sans-IO, meaning it does not handle any I/O operations itself, requiring an event loop for functionality. The design allows for better testing and composability of components, avoiding common pitfalls associated with side effects. The API is redesigned to simplify packet handling and improve performance. Firezone's experience operating WireGuard in production has informed the development of this library, which is now available for use.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-30
Sanstun announced
Firezone introduced Sanstun as a new sans-IO implementation of WireGuard, replacing BoringTun.
News.Ycombinator
2026-10-31
Sanstun repository published
The Sanstun project was made available on GitHub, marking the transition from BoringTun.
github.com

More articles in this cluster (2)

Extracted Entities

1 / 2

Common questions

What is Sanstun?
Sanstun is a new sans-IO implementation of the WireGuard protocol, optimized for performance.
How does Sanstun differ from BoringTun?
Sanstun features a redesigned API, no internal buffering, and is fully sans-IO, unlike BoringTun.
What are the requirements for using Sanstun?
Sanstun requires an event loop to function, as it does not handle I/O operations directly.