Network protection for gaming clubs
VANTAGE GUARDIAN
Rust
TauriAmneziaWGWindows
What it is
The guest runs the client on a club machine and reaches services the provider has closed — without losing the route to the game server. No registration, no email, no password: the right to access is granted by the club itself, because the machine is registered, not the person.
Proof
$ vantage status
tunnel up 82 ms 0.0% loss
routes split club network untouched
# a club machine is always treated as untrusted
How it works
01In production
Running across the Colizeum club network — three clubs, 127 machines, nodes in Frankfurt. It wraps game traffic and chosen services into an obfuscated AmneziaWG tunnel, returning access to servers that had stopped answering from Russia; the guest keeps a clean route to the game server.
02Whitelist, never a full tunnel
A full tunnel is forbidden by design. The guest opens only the services on the whitelist; the composition of what can be toggled is edited centrally, on the server, without shipping a new client.
03Split routing
The guest flips a toggle only for the service they need. Everything else, the game traffic included, goes straight and loses not a millisecond.
04Own DNS resolver
Club providers answer DNS with their own stub. The client asks its own resolver over a secure channel and gets the real address back.
05Game catalogue
The client finds installed games across every launcher on the machine and starts them from one window — the guest need not remember where anything lives.
06Delivered as infrastructure
Not a boxed app: a working network, a browser admin panel entered through a one-time Telegram link, two Telegram bots (a watchdog that reports downed nodes and an admin bot), an HTTP API contract for the Windows client, and support for the life of the licence.
07Proven on the club network
Verified live on the venues' networks: the AmneziaWG tunnel comes up, UDP passes through the provider, obfuscation works, the clubs' DNS isn't spoofed. Six auto-check suites plus a load run guard the server side.
No admin rights are needed on the guest machine, and the club's own local networks are never touched — the image is wiped for the next guest anyway.