WGL2Bridge - Layer 2 bridging over a NetBird (or WG) tunnel, for Windows
Hi all,
First off: this was built with a lot of help from AI. I wouldn't have pulled it off this fast without it.
As you all know, NetBird (like any other WireGuard-based tunnel) works at the IP layer only. My problem with that, is that in my day-to-day work I deal with challenges that require L2, like device discovery and configuration before the devices even have an IP.
We have been trying to move away from conventional VPN solutions that solve this issue, and we use WG a lot when L3 is only needed, but there is a gap for L2.
On Linux this is relatively easy to solve with VXLAN for L2 encapsulation, but on Windows that wasn't available (at least an easy and lightweight way to do it). That's the reason I created this little tool.
WGL2Bridge extends a remote LAN to your Windows machine over an existing NetBird or WireGuard tunnel. It reads raw frames from a TAP-Windows6 adapter, encapsulates them (VXLAN, UDP/4789) and sends them through the tunnel to a peer that injects them onto the remote segment, so two segments behave like one switch. On Linux you'd do this with vxlan + a bridge; Windows has no lightweight equivalent, so this fills that gap.
It's a single self-contained native exe (no runtime to install).
Repo: https://github.com/trupa/WGL2Bridge happy to hear feedback or ideas.