Yggdrasil

Yggdrasil implements a fully end‑to‑end encrypted IPv6 network that can operate over IPv4 when native IPv6 connectivity is unavailable. It creates a lightweight, self‑arranging mesh where any IPv6‑capable application can exchange traffic securely with other Yggdrasil nodes, using a virtual TUN/TAP interface. The software runs on a wide range of systems—including Linux, macOS, Windows, FreeBSD, OpenBSD, OpenWrt, Ubiquiti EdgeRouter, and VyOS—allowing diverse environments to join a common encrypted overlay.

Users configure Yggdrasil by generating a static HJSON or JSON configuration file, which lists peers and network parameters, or by launching it in auto‑configuration mode that selects random keys and defaults at each start. Execution typically requires privileged access to create the virtual network interface, though on Linux the binary can be granted the CAP_NET_ADMIN capability instead of running as root. Documentation covers installation, configuration, and troubleshooting, and the project is licensed under LGPLv3 with an exception permitting binary distribution without source disclosure.