Live data from Hacker News

NetMaker: Connect Everything with a WireGuard VPN

netmaker.io

11–20 of 172 posts

Re: NetMaker: Connect Everything with a WireGuard VPN

#12
post #2

The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…

Is the kernel module how they claim the 5x performance over tailscale? I haven't really done any real tailscale performance metrics but can't see how else they can claim this (unless there is infrastructure performance differences).

Re: NetMaker: Connect Everything with a WireGuard VPN

#13
post #2

The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…

Tailscale doesn't offer an official self-hosted control server, right? That seems to be an advantage of NetMaker. It has no equivalent to tailnet lock, though, as far as I can tell.

It isn't official, but headscale exists: https://github.com/juanfont/headscale

Re: NetMaker: Connect Everything with a WireGuard VPN

#14
post #9
post #2

The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…

You seem very familiar with this topic... have you ever evaluated 'tinc'?

Tinc is dormant these days. Very little development going on.

Cool concept, but limited performance and limited uptake. Their approach to mesh was neat at the time.

Re: NetMaker: Connect Everything with a WireGuard VPN

#15
post #2

The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…

1. thanks for linking that

2. the comparison:

- protocol: wireguard is now baseline

- speed: netmaker is faster because it uses kernel wg - this is not going to hold true for all system configurations, certainly doesn't for macos

- flexibility: feels like it does the same as tailscale, marketed slightly different as they list common use-cases – egress and ingress gateways; network shaping with acls is also possible in ts; maybe someone will write-up an unbiased comparison on self hosting

- price: ts offer seems to be good enough for most users and their limits are "soft" anyway – i pay $45 a year because i want sustainable, not free

looking for reasons to change and don't find any

Re: NetMaker: Connect Everything with a WireGuard VPN

#16
post #9

Earlier quoted context omitted.

You seem very familiar with this topic... have you ever evaluated 'tinc'?

Tinc is dormant these days. Very little development going on. Cool concept, but limited performance and limited uptake. Their approach to mesh was neat at the time.

Dormant, or stable?

I've been running a tinc mesh network for eons w/ my systems and it's never given me any trouble. I use git to check in the 'hosts/' folder and add/remove hosts as needed, pull down to all the nodes, and they can all connect.

I do wish the encryption + transport could be as performant as wireguard, but for my needs, I haven't been pushing it hard enough that it's a concern for me.

Re: NetMaker: Connect Everything with a WireGuard VPN

#18
post #2

The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…

Is the kernel module how they claim the 5x performance over tailscale? I haven't really done any real tailscale performance metrics but can't see how else they can claim this (unless there is infrastructure performance differences).

They do highlight that they use kernel space Wireguard as opposed to Tailscale which uses user space Wireguard.

https://medium.com/netmaker/battle-of-the-vpns-which-one-is-...

https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerot...

Re: NetMaker: Connect Everything with a WireGuard VPN

#19
A pain point I still haven't resolved with WG is this. From my phone, I want to access my homelab through the WG server at home, but everything else through an external WG VPN somewhere else. My homelab ip range is 10.10.0.0/24 or whatever, but the external VPN is some other range. Wireguard doesn't seem to like this. The alternative is to route my phone to home for 100% of traffic, and my home router would egress through the external VPN. But I don't want my home network to be the bottleneck, I don't exactly have the best Internet service at home. From a cursory search through NetMaker docs, I didn't see anything that explicitly shows how to configure vpns, or, I don't know what to call it, bridging multiple wireguard networks.
Post reply on HN