Skip to main content
Chain-based tunneling framework

WaterWall

Compose listeners, transport layers, packet transforms, and protocol adapters into reliable network paths.

50+documented nodes
L3/L4packet and stream paths
JSONconfiguration-first
Why it feels different

A network toolkit built around composition.

Instead of one fixed proxy shape, WaterWall lets each route describe the exact chain it needs.

Chain

Composable tunnel chains

Build network paths from small nodes: listeners, protocol transforms, encryption, multiplexing, packet bridges, and connectors.

Runtime

High-throughput runtime

WaterWall is designed around asynchronous I/O, worker threads, buffer pools, and low-copy packet movement.

Packet

Stream and packet workflows

Use ordinary TCP/UDP flows, raw packet pipelines, TUN devices, WireGuard edges, or bridge between models when a route needs it.

The mental model

Describe the path, then let each node do one job.

A route can stay linear, or hand traffic to Router so rules choose different branches by domain, protocol, identity, port, or source.

Client tunnel chain
TcpListenerMuxClientVlessClientTlsClientTcpConnector
Router node branching traffic by rules