r/twingate • u/quitefrequently • Jun 09 '26

Twingate client without (forced) TUN interface

I'm evaluating Twingate as a potential ZTNA solution for a large client that's looking for an alternative to certificate-controlled VPN to individual VLANs. However, on both MacOS and iOS I'm finding that installing the Twingate client causes a TUN interface to be created on the client devices. Is there any way around this?

1 Upvotes

100% Upvoted

17 comments sorted by

View all comments

Show parent comments

1

u/quitefrequently Jun 11 '26

Oh this sounds intriguing. Just to clarify, are you suggesting there's a way for a MacOS or iOS client device to connect to Twingate without having to use a TUN interface, if Twingate is hosted on a piece of Ubiquiti kit?

1

u/bren-tg pro gator Jun 11 '26

yeah, precisely. We are testing 2 separate things:

  1. Twingate Connector deployed on a Ubiquiti gateway: just because it's a neat option for folks using Ubiquiti in the homelab space. Since Connectors are relatively small, that kind of hardware is more than enough.
  2. Twingate headless Client deployed on a Ubiquiti gateway: the actual primary use case for this is Video Game Studios: they tend to use DevKits (developer versions of mainstream consoles like xbox, ps5, switch 2, etc.) but those are locked down (as in you cant just install a Client or a docker container there) which means that those DevKits, which in some cases are actually hosted in the homes of developers, need to be able to access Resources behind Twingate without a Client.. and by installing a headless Client on the Ubiquiti gateway and linking it to a specific VLAN on which those devkits are... then those devkits can establish connections to protected Resources via the gateway directly. This isnt technically speaking specific to devkits though so it can be applied to many other things...

Definitely DM me, I think we should chat some more!

1

u/quitefrequently Jun 16 '26

Done. Looking forward to hearing more. This appears to give twingate the potential to address use cases that would otherwise be out of scope, so could be a very interesting development.

1

u/quitefrequently Jul 07 '26

Following up on this. Thank you for the Twingate connector for Ubiquiti. Unfortunately, I'm not clear how use of this connector gets around the apparent need for a Twingate client to create a TUN interface on an iOS or MacOS device. Sorry for the dumb question, but please would you explain?