171–180 of 306 posts
Earlier quoted context omitted.
if it does, I don't see "how"
I don't know try to type "Wireguard NetworkManager Ubuntu" in your favorite search engine? https://blogs.gnome.org/thaller/2019/03/15/wireguard-in-netw...
I think Tailscale [1] can be to WireGuard what Github and Gitlab are to git. If you haven’t checked them out yet: worth taking a look! [1] https://tailscale.com
What do you gain by shilling for alpha-tier for-profit software for free? Are they your friends? do they pay you for that?
Researching various approaches lead me to a hn thread recommending Tailscale, signed up, worked for me & now I’m a happy user and planning to get 2 additional new Pis tomorrow (still deciding between the 2G and the 4G model).
edit: I regularly recommend things I find useful to others (especially those that took me some effort to discover) independent of whether they are bits of insight (try x instead of y), open source software or for profit software.
Just thought others might find this useful as well, that’s all.
Earlier quoted context omitted.
"My language of choice right now is Go, and has been for a while. One of the things I like about it is that it's a bit opinionated." I've frequently described Go as a very, very good 1990s language. Going through the process of maturity takes time. You can't have a "very, very good" 2020s language right now, because at the frontier we're still feeling our way through the issues. (Remember, whatever you're about to hi…
> I've frequently described Go as a very, very good 1990s language No, go is quite similar to algol68 and adds little to it. http://lua-users.org/lists/lua-l/2009-11/msg00576.html > I believe probably >75% of the hatred Go engenders is from people afraid that Go's success will erase or invalidate the 2010s/2020s languages they prefer No, it invalidates 30 years of research on programming languages, regardless of impl…
Programming language flamewars are a special case and not in a good way. Many of us lived through seeing those take over online communities in the past and reduce them to scorched earth. That's one of our motivations for wanting to keep HN from that fate, or at least stave it off a bit longer: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
Actually your comment could be a good contribution with a little editing. The first link seems good. The second is too flamey.
Increasingly it seems like heavily opinionated foundational tools and frameworks are overtaking more highly configurable alternatives, at least in terms of breadth of usage or popularity. Could this be a positive change? Does this represent a healthy response cognitive fatigue in a world with configuration options at every possible layer? Or does this shift to less readily configurable tools represent an overall nega…
For cryptographic (and related) applications, it certainly seems standard engineering advice now to reduce choices and configurations to a minimum [1] (but apparently not 2 decades ago, when OpenSSL, OpenVPN, and GPG were initially released).
[1] pretty sure Bruce Schneider et al. recommended it in their 2010 book Cryptography Engineering.
I really like wireguard, but one thing that bugs me is the fact that it's layer 3 (an ip tunnel) and has no code to support layer 2 (ethernet MAC tunnel). The downside for me is that you have to manage static ips in the configurations (specifically it's not compatible with ipv6 slaac and NDP). There is https://git.zx2c4.com/wg-dynamic but it's very experimental at the moment. The level 3-only tunnel is motivated as "…
Earlier quoted context omitted.
Broadcast/multicast propagation.
Can you say more to explain the utility of this to those unfamiliar with networking?
In addition to device discovery, these are frequently used for heartbeat messages to indicate that you are still alive (for high-availability protocols like VRRP).
Earlier quoted context omitted.
Tailscale looks promising. ( https://tailscale.com/ )
I am sick of people shilling to this thing here. Stop exploiting HN for free advertising. Every Wireguard post here has become a free ad for this company. EDIT: Stop supporting parasites repackaging and rebranding open source and selling it while leaving the author who single handedly made this entire thing possible begging for donations on Patreon
Earlier quoted context omitted.
If it’s replacing an ipsec mesh that’s pretty hard to believe. And if that was the issue and commercial support couldn’t even identify that as the cause, ZeroTier has bigger issues.
If all sites are behind symmetric NATs, there's not much ZeroTier could do to help aside from telling him to assign direct mappings on the NAT/Firewall to each ZT instance. Symmetric NATs are antithetical to peer to peer communication. Many I've run across in the wild have special rules to handle IPSec which won't exist for other lesser known protocols. It's also possible the user wasn't willing or able to make netwo…
Earlier quoted context omitted.
Which ones? How do they suggest that cryptographic upgrades occur?
In the cryptography world backwards compatibility is basically "let the adversary switch me back to the old and busted protocol so I can be owned even after I upgraded to the latest version."
OpenPGP is an example of a case where relatively extreme backwards compatibility is required as old archived messages have to be accessible. But that isn't a problem because things are such that downgrade attacks are impossible. The list of desired methods is in the public key which is signed with itself. So downgrades are not always an issue.
Earlier quoted context omitted.
Out of curiosity, what is the use case for doing VPN at layer 2?
Someone else said broadcast/multicast, so I'll also add communication with legacy systems that don't speak IP or have other wacky requirements. These do exist in industrial and embedded settings. It's a niche use case but it's very useful there.