PitchHut
Log in / Sign up
Quincy
7 views
A QUIC-based VPN client and server implementation.
Pitch

Quincy is a versatile VPN solution leveraging the QUIC protocol to deliver a secure and efficient client-server architecture. With support for multiple platforms, it ensures reliable authentication and low-latency data transfer through an encrypted tunnel. Experience seamless connectivity with minimal overhead.

Description

Quincy is a powerful VPN client and server implementation built on the innovative QUIC protocol. It leverages the quinn library for creating secure, encrypted tunnels between clients and servers, ensuring robust authentication and efficient data transfer.

Key Features

  • Enhanced Security: Quincy employs a bi-directional stream for reliable authentication and uses unreliable datagrams for lower latency, reducing the overhead of multiple reliability layers.
  • Efficient Architecture: The framework is designed using the tokio runtime, allowing for a scalable and efficient handling of connections through its TUN interface.
  • Cross-Platform Support: Quincy is compatible with various platforms, including:
    • Windows (x86_64) via Wintun
    • Linux (x86_64, aarch64)
    • FreeBSD (x86_64, aarch64)
    • macOS (aarch64)

Usage Overview

Quincy includes three distinct binaries to facilitate its usage:

  • quincy-client: The dedicated VPN client.
  • quincy-server: The server counterpart that supports safe and secure connections.
  • quincy-users: A utility for managing user credentials in the users file, mimicking /etc/shadow formatting.

To start using Quincy, users must provide separate configuration files, with examples available in the repository. For instance, launching the client can be done with:

quincy-client --config-path examples/client.toml

Certificate Management

Setting up certificates is crucial for secure communications. Quincy supports:

  • Certificates signed by trusted CA services (such as Let's Encrypt).
  • Self-signed certificates suitable for local testing or home-lab environments.

Performance Options

Quincy offers customizable build features:

  • Jemalloc: For improved memory management on UNIX systems (enabled with the --features jemalloc command).
  • Post-quantum Cryptography: For advanced security features during key exchanges, albeit with additional dependencies and not recommended for production.

Conclusion

Whether you're looking to enhance your network security with a reliable VPN solution or explore advanced cryptographic features, Quincy represents a modern approach to VPN technology harnessing the power of QUIC.