trailofbits/algo

Set up a personal VPN in the cloud

View on GitHub ↗Jump to charts ↓

Summary Information

Updated 33 minutes ago
Added to GitGenius on September 1st, 2026
Created on May 15th, 2016
Open Issues & Pull Requests: 77 (+0)
GitHub issues: Enabled
Number of forks: 2,367
Total Stargazers: 30,367 (+1)
Total Subscribers: 433 (+0)

Repository Insights (GitGenius)

Median issue/PR response: 4.3 days
Mean response time: 203.3 days
90th percentile: 746.0 days
Tracked items: 204

How this project is maintained

Around half of the issues opened in the past year never receive a reply. 69% of open issues come from outside the core team, a mix of external reports and the maintainers' own roadmap. Work labelled "security_enhancement" is answered fastest, typically in about 5 hours, while "enhancement" waits about 9 days. Only 6% of issues opened in the past year have been closed. Three people close 96% of everything that gets resolved.

Charts & Analytics

Fetching additional details & charts...

Issue Activity (beta)

Open issues: 70
New in 7 days: 0
Closed in 7 days: 0
Avg open age: 1,592 days
Stale 30+ days: 67
Stale 90+ days: 62

Recent activity

Opened in 7 days: 0
Closed in 7 days: 0
Comments in 7 days: 0
Events in 7 days: 0

Top labels

  • enhancement (56)
  • bug (26)
  • documentation (23)
  • cloud_provider (20)
  • wireguard (18)
  • aws (16)
  • deploy_enhancements (16)
  • ansible_server_deploy (14)

Most active issues this week

No issue events were indexed in the last 7 days.

Detailed Description

Algo is a set of Ansible scripts that simplify the deployment of a personal VPN server in the cloud.

The tool addresses the complexity of setting up secure VPN infrastructure by automating the entire process through Ansible playbooks. It deploys either WireGuard or IPsec with IKEv2 on Ubuntu 22.04 LTS, applying security-focused defaults including strong encryption algorithms like AES-GCM and SHA2. The approach emphasizes minimal logging, automatic security updates, and optional privacy enhancements. It generates client configuration files and QR codes for easy device onboarding, and for Apple devices it creates profiles that enable IPsec without requiring additional client software.

Algo suits developers and individuals who want a personal VPN without managing complex cryptographic configurations or wrestling with legacy protocols. It works best for those comfortable with cloud providers, as it automates deployment to DigitalOcean, AWS Lightsail, EC2, Vultr, Azure, Google Compute Engine, Scaleway, Hetzner Cloud, Linode, and other OpenStack or CloudStack platforms, or to self-managed Ubuntu servers for advanced users. The tool explicitly rejects legacy cipher suites, L2TP, IKEv1, and RSA, and does not provide anonymity or censorship avoidance features. It includes helper scripts for user management and optional ad-blocking through a local DNS resolver, plus optional SSH tunneling capabilities.

Development activity shows consistent maintenance with regular updates to keep pace with Ubuntu LTS releases and cloud provider API changes. The project maintains clear documentation for deployment across multiple platforms and actively supports both WireGuard and IPsec protocols as they evolve. Security-focused updates are applied regularly to address emerging cryptographic best practices and platform vulnerabilities.