用 Rust 写的网络设备操作系统
A network appliance OS, written in Rust
RustROS 是一个 unikernel：约 200 KB 的内核只做驱动、协议栈和存储，路由、NAT、VPN、代理、网站这些功能都是可以在线安装和更新的应用。开机即用，内核 A/B 双槽更新，失败自动回滚。
RustROS is a unikernel: a ~200 KB kernel does drivers, the network stack and storage; routing, NAT, VPNs, proxies and websites are apps you install and update online. A/B kernel slots, automatic rollback.
它能做什么
What it does
路由与多 WAN
Routing and multi-WAN
多网卡、VLAN、源地址路由；NAT、静态映射和端口转发；CAKE 流量整形。
Several NICs, VLANs, source routing; NAT, static mappings and port forwards; CAKE shaping.
VPN
WireGuard 服务端与客户端（含 WARP 一键注册），L2TP 服务端多实例与拨号客户端。
WireGuard server and client (WARP sign-up built in), L2TP servers per address and dial-out clients.
代理
Proxies
SOCKS5 / HTTP 代理与 AnyTLS，多实例，各自的出口地址和账号。
SOCKS5 / HTTP proxies and AnyTLS, any number of instances, each with its own egress and logins.
网站
Websites
静态站点与反向代理，按域名选证书，Let's Encrypt 自动签发——本站就跑在 RustROS 上。
Static sites and reverse proxying, certificates by name, Let's Encrypt built in — this site runs on RustROS.
存储
Storage
崩溃安全的键值存储放配置，文件分区是标准 ext4，拿到 Linux 上也能直接读。
A crash-safe key-value store for settings; files live on a standard ext4 that Linux reads as it is.
管理
Management
网页管理（每个应用的设置页自动生成）、控制台、加密的在线更新，或者接入面板统一管理。
A web admin whose pages are generated from each app's settings, a console, signed online updates, or a central panel.
发布版
Releases
正在读取最新发布版…Reading the latest release…
每个发布版的清单 latest.json 都用 Ed25519 签名（.sig），公钥：
Each release's manifest latest.json is signed with Ed25519 (.sig); the public key:
5JddaWkdvKjJte+tGwE9kn6f33EOUj2ixVBBOj45s38=
内核和每个应用都带 SHA-256；面板和设备在安装前都会校验。
The kernel and every app carry a SHA-256; the panel and the machine check it before installing.