Viewing profile — pcarroll

I wanted to use 11.0.0.0 and call the company "Eleven," but by that time the DOD had given up the block for general use... GCNAT is perfect.

We did. It's called IPv6. It's 20 years old and still not usable universally. At the high end, like enterprise or telcos, it's fantastic. But at the grass roots level of residentia…

The need is real. You are a service provider. You need to manage equipment at customer sites. You need to access them simultaneously. But all the customers are using the same subne…

That does not happen here. The CGNAT addresses are in the VPN tunnel. And the tunnel connects private devices end-to-end. The LAN packets never see the Internet. They are inside th…

The problem there is you still need to keep track of the subnets. It works for a while, but it's quite complex. NAT is actually easier when you get into hundreds of sites.

The way we did it, roting is not a problem. Any Netrinos client (Windows, Mac, or Linux, including the free version) can act as a gateway. It assigns a unique overlay IP to devices…

Hole punching actually works most of the time. A lot more often than you might think. But enterprise firewalls usually don't allow it. And some home routers fail when you check all…

Yes! Exactly this.

IPv6 is very badly supported at the low end of the market. Cheap webcams, doorbells, etc. And that not counting already old equipment... If we had a nuclear war, we could start ove…

We chose Go as the development language. Go produces statically compiled binaries that include all dependencies. The only external deps are wireguard, nftables, nmap, etc. All easy…

This works fine for your end. But the issue we are addressing is on the other end, when you don't control the network and need to reach devices. If all customer sites are running r…

I like to think this is what we did. It's a simple Linux software stack - Linux, nftables, WireGuard, Go... But the goal was also to make it automatic and easy to use. It's not for…

The initial idea started as a bunch of ssh tunnels. Been doing that for years. But WireGuard seemed a better solution at scale, and more efficient. When I first saw WiteGuard, it b…

Support for IPv6 is notoriously bad in residential modems. They can barely run IPv4. In an enterprise, you can do it properly. But here we are stuck with the junk the ISP gave out.…

How do you handle embedded devices that cannot install software?

I actually looked at using those before the CGNAT range, but many of those blocks have been returned to the public Internet.

How overlay addressing and 1:1 NAT solve the conflicting subnet problem across hundreds of sites. A technical walkthrough with WireGuard. https://netrinos.com/blog/conflicting-subn…

We implement STUN and TURN functionality natively in WireGuard rather than using separate protocols. Netrinos uses a central rendezvous server that participates in WireGuard handsh…

I have found that residential ISP routers are notoriously flaky. It doesn't take much to confuse them. A lot of edge cases could be just this.

Thanks to everybody who participated. This has been an excellent discussion and has resulted in some interesting ideas to pursue.

Maybe I should look into that... there are a few different ways to do it, and none of them are all that hard. - i just put it in the roadmap

Netrinos can be entirely cli on all 3 platforms. If you install the OpenSSH server on Windows, you can manage Netrinos in a terminal, just like on Linux or Mac. e.g. https://netrin…

Could you please elaborate on what you found lacking? Always looking to improve.