Anywherelan
Linux exit nodes now survive network changes (Wi-Fi/Ethernet) without restarting awl. The gateway can also be enabled while offline and connects once a network appears.
Security: malformed tunnel packets can no longer crash or overload a peer.
Fixed DNS AAAA (IPv6) queries incorrectly returning IPv4 records.
UI: peer badges adapt to narrow screens.
You can also route traffic through a remote device — either per-app as a SOCKS5 proxy, or all of your device's traffic at once as a full-tunnel VPN gateway (exit node).
Some use cases
- Connect to your home or work laptop over RDP/VNC/SSH even when it sits behind NAT, without configuring port forwarding.
- Reach self-hosted services like Nextcloud, Home Assistant or Bitwarden without exposing them to the internet.
- Access websites from another country by using a remote device as a SOCKS5 proxy.
- Route all of your traffic through a remote device as a full-tunnel VPN gateway (exit node), like a classic VPN.
- Gaming: local multiplayer as if everyone were on the same LAN.
- Share a development server with a colleague on another device, as an alternative to ngrok.
- Use an old Android phone remotely with scrcpy to run Android-only apps without an emulator.
Features
- Fully peer-to-peer. No third-party coordination servers — your traffic stays between your devices.
- Route traffic through a remote device like a SOCKS5 proxy.
- Full-tunnel VPN gateway: route all of your device's traffic through a remote exit node.
- Easy to use: install the app, scan the QR code of another device, and you are connected.
- Built-in NAT traversal.
- If both devices are behind NAT and direct P2P is not possible, encrypted traffic is relayed through community relays.
- TLS 1.3 encryption for all transports (QUIC and TCP).
- ed25519 peer authentication — a peer id is the device's public key.
- Cross-platform: Android, Windows, Linux, macOS.
How it works
Awl is built on top of libp2p for peer-to-peer networking and a TUN virtual interface for IP routing. QUIC or TCP with TLS is used as a transport, and a DHT is used to discover peers. On first launch, the app connects to community bootstrap nodes, registers itself, and then looks up the addresses of the peers you want to reach.
Source code, desktop builds and more documentation: https://github.com/anywherelan/awl
- Author: Anywherelan
- License: Mozilla Public License 2.0
- Website
- Issue Tracker
- Source Code
- Changelog
- Build Metadata
- Reproducibility Status
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid-
arm64-v8aarmeabi-v7ax86_64This version requires Android 7.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Download APK 63 MiB PGP Signature | Build Log
-
arm64-v8aarmeabi-v7ax86_64This version requires Android 7.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Download APK 63 MiB PGP Signature | Build Log
Route all of your device's traffic through one of your remote devices at the IP layer, like a classic VPN — not just per-app like the SOCKS5 proxy. Pick an exit node and turn it on or off without restarting the app.
Note: the exit node must be a Linux device (Android can use a gateway, but not serve as one). Only IPv4 traffic is routed.