WireGuard Server + Client
Menu bar resident VPN — provision peers, import configs, auto-assigned tunnel IPs.
Protected macOS VPN artifact — encrypted payload, symbol-stripped binary, Homebrew tap. Server, client, and onion routing without exposing source.
Single-seat macOS VPN with operator-grade CLI, menu bar control, and a binary-only distribution channel — no source compile, no datacenter dependency.
Menu bar resident VPN — provision peers, import configs, auto-assigned tunnel IPs.
Hidden service .onion endpoints and SOCKS egress for location privacy.
Encrypted, symbol-stripped artifacts. No Swift source ships to operators.
Headless commands for server/client/tor or full GUI from the status item.
[Menu Bar UI] <--> +----------------------+
[CLI headless] | VPNCoordinator |
| WireGuard + NAT |
+----------+-----------+
|
+--------------------+--------------------+
| server mode | client mode | tor mode
v v v
[Peer provisioning] [Tunnel connect] [.onion + SOCKS]
| | |
v v v
[wg0 interface] [Auto IP assign] [TorManager]
|
[Network Extension / userspace backend]
WireGuard handles the data plane. Auto-assigned tunnel IPs remove manual addressing. Tor integration adds hidden-service endpoints and anonymized egress when enabled.
Homebrew tap → trust → install. Encrypted binary-only payload.
brew tap shyamalschandra/tapbrew trust --formula shyamalschandra/tap/menu-bar-vpn-binarybrew install menu-bar-vpn-binary wireguard-tools toropen "$(brew --prefix menu-bar-vpn-binary)/MenuBarVPN.app", or use the CLI: menu-bar-vpn server start / menu-bar-vpn client connect / menu-bar-vpn tor start.Only encrypted binaries and Homebrew tap metadata are published here. The rest of the repository — Swift source, build scripts, and internal tooling — stays private.
Homebrew downloads the encrypted artifact from GitHub Pages, verifies SHA-256, decrypts at install time with PBKDF2, and places menu-bar-vpn plus MenuBarVPN.app.
IEEE-style industrial-track design paper for menu-bar-vpn-binary. Download or read inline below.