Raindrop VPN

A VPN with no servers and no secrets. Raindrop VPN routes your traffic through another volunteer's connection and, while it is on, lets other people exit through yours. You just pick a country. Behind the scenes the apps keep one signed node list in sync with each other over encrypted connections. There are no accounts, no servers and no telemetry.

★ Private, with a kill switch

• Pick the country your traffic should exit in, or let the app choose
• WireGuard tunnels: the exit node's key comes from the signed list, so nobody can impersonate it
• Kill switch: if your exit node disappears, your traffic is blocked instead of leaked until another node answers
• No leaks: IPv6 is refused while connected, and DNS is forced into the tunnel

★ Safe for exit nodes

• People using your connection cannot reach this computer, your home network or each other
• Outgoing e-mail on port 25 is blocked, so your connection can't relay spam
• Nothing they do is logged: you see only how many people are connected and how much data was relayed
• You choose how many people may use your connection at once

★ A private node list

• No servers and nothing published anywhere: the app shows countries, not people's addresses
• Exit nodes share the full list with each other; everyone else sees how many nodes each country has and gets a few in the country they pick
• Every exit node is one Ed25519-signed line; forged or altered lines are ignored, and a new node is added only after another node has checked that it really answers
• The swarm runs as an unprivileged user, over TLS, and edits the list live as people come and go
• Apps find each other on your local network, or through an invite address a friend shares with you
• A live log shows everything the app does, and the source is plain Python you can read

★ Your consent comes first

Turning on makes you an exit node too, and the app says so plainly: you have to read and accept the agreement first. Other Raindrop VPN users can learn your address. Turning off disconnects everyone and sends a signed removal notice. Being an exit node can carry legal risk where you live, and exit nodes can see unencrypted traffic, just like any VPN provider. Always use HTTPS.

One-time setup: the background service needs permission to manage your network and firewall. The app shows this line with a Copy button. Paste it into a terminal:

sudo snap connect raindrop-vpn:network-control && sudo snap connect raindrop-vpn:firewall-control

If your router has no UPnP or NAT-PMP, forward UDP 51871 (WireGuard), TCP 51872 (exit API) and TCP 46881 (node-list swarm) to this computer.

Command line: raindrop-vpn.cli status | on | off | nodes | country DE | log -f | peers