Veil is a Windows desktop client for TrustTunnel VPN. It wraps the TrustTunnel runtime in a polished WPF app with split tunneling, server setup tools, logs, and a tray-first workflow.
The tunneling engine integration was refined alongside the app, so Veil treats connection setup, split tunneling, diagnostics, and cleanup as one cohesive desktop workflow.
- Connect and disconnect from a private TrustTunnel VPN.
- Windows tray menu with show, connect/disconnect, and exit actions.
- Split tunnel by domains, installed applications, manual executable names, and GeoIP countries.
- Installed app discovery with executable icons.
- Log-based split-tunnel suggestions.
- Remote server setup over SSH with certificate and service checks.
- JSON import/export for client settings.
- Single-instance protection and graceful VPN process cleanup.
- Windows 10/11 x64.
- .NET SDK 9.0 for development.
- Administrator approval when running Veil, because Wintun adapter creation requires elevation.
- VeilEngine Windows runtime and
wintun.dllinclient/.
Veil depends on a patched TrustTunnel client runtime. The engine patch is included in engine/patches, and the dependency script below downloads the matching Windows runtime from Veil releases.
Download runtime dependencies:
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\download_deps.ps1The downloaded files are intentionally ignored by git:
client/trusttunnel_client.exe
client/wintun.dll
dotnet build Veil.sln
dotnet run --project Veil.csproj
dotnet run --project Veil.Tests\Veil.Tests.csprojBuild a portable zip, a VeilEngine runtime zip, and a Windows installer:
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\build_release.ps1Artifacts are written to:
dist/Veil-portable-win-x64.zip
dist/VeilEngine-win-x64.zip
dist/Veil-Setup-win-x64.exe
The installer is per-user and installs to:
%LOCALAPPDATA%\Programs\Veil
Runtime settings are stored separately in:
%APPDATA%\Veil
Veil is released under the Apache License 2.0. See LICENSE.