Automic VaultAutomic Vault

brew

Install swgp-go with Homebrew, Nix

Simple WireGuard proxy with minimal overhead for WireGuard traffic. Version 1.10.0 via Homebrew; verified 2026-06-12. Also installable with nix: nix profile install nixpkgs#swgp-go.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install swgp-go

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#swgp-go

nixpkgs package indexes · pkgs/by-name/sw/swgp-go/package.nix · source: api.github.com

overview

Package summary

Simple WireGuard proxy with minimal overhead for WireGuard traffic

Commands and aliases

  • swgp-go

history

Project history and usage

swgp-go is a small Go proxy that obfuscates or encrypts WireGuard traffic with minimal overhead. It provides client and server modes intended to sit immediately outside an ordinary WireGuard tunnel.

Project history

The official repository was created in March 2022. The project developed multiple proxy modes that balance overhead and traffic-shape concealment, with newer 2026 modes adding timestamped replay protection while retaining legacy modes for compatibility.

The project reached a 1.x release series and continued regular releases through 2026. Its deployment assets include JSON examples and both singleton and templated systemd unit files.

Adoption history

Upstream distributes prebuilt release binaries and documents installation through Homebrew, AUR release and VCS packages, and `go install`; a community container image supplies another deployment route. The supplied metadata also records a Nix package.

How it is used

Operators run one swgp-go server near a WireGuard endpoint and one client near the WireGuard peer, configuring listen and endpoint addresses, a matching proxy mode and pre-shared key, and the path MTU. Linux deployments can use the supplied systemd units with JSON files under `/etc/swgp-go`.

Why package nerds care

swgp-go is appealing to package and network-tool enthusiasts because it is a single Go binary with no separate control service, conventional JSON configuration, systemd examples, and several installation channels. It addresses WireGuard traffic obfuscation without replacing WireGuard itself.

Timeline

  • 2022: The official swgp-go repository was created.
  • 2025: Version 1.8.0 was released during the established 1.x series.
  • 2026: Versions 1.9.0 and 1.10.0 were released, and the documented 2026 proxy modes added replay protection.

Related projects

  • WireGuard provides the tunnel traffic carried by swgp-go. The README uses `wg genpsk` for compatible pre-shared keys and points to a community-maintained container image for container deployment.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for swgp-go. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
/etc/swgp-go/config.json/etc/swgp-go/%i.json

executables

Installed executables

CommandKindExposureNote
swgp-gocliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-26
manager version1.10.0
manager updated2026-06-12
local dataok
upstreamcurrent
latest detectedv1.10.0

https://github.com/database64128/swgp-go

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:swgp-go
Version1.10.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/swgp-go
Homepagehttps://github.com/database64128/swgp-go
Repositoryhttps://github.com/database64128/swgp-go
Upstream docshttps://github.com/database64128/swgp-go#readme
LicenseAGPL-3.0-or-later
Source archivehttps://github.com/database64128/swgp-go/archive/refs/tags/v1.10.0.tar.gz
Last updated2026-06-12T17:28:09Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameswgp-go
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

swgp-go

nix profile install nixpkgs#swgp-go
  • normalized package name match
  • Matched by: Swgp Go
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sw/swgp-go/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment