--- title: WireGuard for Kubernetes: Introducing Wormhole | daily.dev description: Teleport announces Wormhole, an open source Kubernetes CNI network plugin combining the simplicity of flannel with WireGuard's encrypted networking. Built for... canonical: https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: WireGuard for Kubernetes: Introducing Wormhole | daily.dev og:description: Teleport announces Wormhole, an open source Kubernetes CNI network plugin combining the simplicity of flannel with WireGuard's encrypted networking. Built for... og:url: https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi og:image: https://api.daily.dev/og/posts/tZg8BvTHi.png og:image:alt: WireGuard for Kubernetes: Introducing Wormhole og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # WireGuard for Kubernetes: Introducing Wormhole **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary Teleport announces Wormhole, an open source Kubernetes CNI network plugin combining the simplicity of flannel with WireGuard's encrypted networking. Built for use with their Gravity Kubernetes packaging tool but compatible with any certified Kubernetes distribution, Wormhole creates a full mesh encrypted network between cluster hosts, using the Kubernetes API for key exchange and coordination. The project is currently alpha status, untested in production at scale, and lacks a formal security review. Future plans include VPN access to clusters, attaching external resources to the overlay network, and cross-cluster encrypted networking. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Wormhole and how does it use WireGuard for Kubernetes networking? Wormhole is an open source Kubernetes CNI network plugin from Teleport that combines the simplicity of flannel with WireGuard's encrypted networking. It relies on the Kubernetes IPAM controller to assign subnets, generates keys per node on startup, publishes public keys and status via the Kubernetes API, and configures a full mesh encrypted network between all cluster nodes. _daily.dev surfaces new networking and security tooling for engineers evaluating their Kubernetes stack._ ### Is Wormhole ready for production use in Kubernetes clusters? No, Wormhole should be considered alpha software, suitable for early adopters to test and report problems rather than production deployment. It is reasonably stable in design and upgrade path but has not been battle tested across diverse network configurations, and it has not undergone a formal third-party security review. _Track the maturity of emerging infrastructure tools like this on daily.dev before betting production workloads on them._ ## Similar posts on daily.dev - [Understanding Kubernetes Networking](https://daily.dev/posts/understanding-kubernetes-networking-oooxha7or) · cilium · 22 upvotes · 1 comments - [Managing WireGuard across multiple devices used to be a nightmare — this changes everything](https://daily.dev/posts/managing-wireguard-across-multiple-devices-used-to-be-a-nightmare-this-changes-everything-ikux0nao2) · XDA Developers · 0 upvotes · 0 comments - [EKS: Cilium as the only CNI driver with simplified hybrid nodes and admission webhooks routing](https://daily.dev/posts/eks-cilium-as-the-only-cni-driver-with-simplified-hybrid-nodes-and-admission-webhooks-routing-wwez1oubj) · ITNEXT · 1 upvotes · 0 comments - [Kubernetes Networking Explained: From ClusterIP to Cilium Service Mesh](https://daily.dev/posts/kubernetes-networking-explained-from-clusterip-to-cilium-service-mesh-rhwqkcwdn) · freeCodeCamp · 5 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"WireGuard for Kubernetes: Introducing Wormhole","url":"https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi"},"datePublished":"2026-08-23T12:23:20.495Z","dateModified":"2026-08-23T12:55:05.432Z","description":"Teleport announces Wormhole, an open source Kubernetes CNI network plugin combining the simplicity of flannel with WireGuard's encrypted networking. Built for...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,kubernetes","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"WireGuard for Kubernetes: Introducing Wormhole"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/wireguard-for-kubernetes-introducing-wormhole-tzg8bvthi#faq","mainEntity":[{"@type":"Question","name":"What is Wormhole and how does it use WireGuard for Kubernetes networking?","acceptedAnswer":{"@type":"Answer","text":"Wormhole is an open source Kubernetes CNI network plugin from Teleport that combines the simplicity of flannel with WireGuard's encrypted networking. It relies on the Kubernetes IPAM controller to assign subnets, generates keys per node on startup, publishes public keys and status via the Kubernetes API, and configures a full mesh encrypted network between all cluster nodes. daily.dev surfaces new networking and security tooling for engineers evaluating their Kubernetes stack."}},{"@type":"Question","name":"Is Wormhole ready for production use in Kubernetes clusters?","acceptedAnswer":{"@type":"Answer","text":"No, Wormhole should be considered alpha software, suitable for early adopters to test and report problems rather than production deployment. It is reasonably stable in design and upgrade path but has not been battle tested across diverse network configurations, and it has not undergone a formal third-party security review. Track the maturity of emerging infrastructure tools like this on daily.dev before betting production workloads on them."}}]} ```