While the website is an amazing show-off of modern web design,
I'm not sure why I would need this
as opposed to the dead simply good old tiny WireGuard client
which just works perfectly.
NetMaker: Connect Everything with a WireGuard VPN
51–60 of 172 posts
Re: NetMaker: Connect Everything with a WireGuard VPN
#52While the website is an amazing show-off of modern web design, I'm not sure why I would need this as opposed to the dead simply good old tiny WireGuard client which just works perfectly.
people that want to connect: roaming machines, machines behind nat
i use it to connect a notebook to a machine that sits behind nat, and to circumvent firewall rules
before i had to maintain an open port on the router, and a dyndns like process to connect to the machine behind nat, now not only is that machine no longer exposed on the internet i also don't have to keep the separate configs for the same machine (local and remote)
in regards to circumventing firewall rules it's just git with keys vs git over http, i just proxy jump through the home machine and call it a day
Re: NetMaker: Connect Everything with a WireGuard VPN
#53I have to connect a Mac on latest OS to a Windows 7 PC on the same LAN to get access to an established VPN (L2TP/IPsec) on that machine. I have never seen a confusing space as the VPN world. While I can connect e.g. to a SoftEther VPN Server on the windows box just fine, the installation breaks the established VPN connection to the external L2TP VPN. Installed Wireguard and have absolutely no idea on how to configure…
this is where services like netmaker and tailscale come in, they're supposed to just work™
Re: NetMaker: Connect Everything with a WireGuard VPN
#54A pain point I still haven't resolved with WG is this. From my phone, I want to access my homelab through the WG server at home, but everything else through an external WG VPN somewhere else. My homelab ip range is 10.10.0.0/24 or whatever, but the external VPN is some other range. Wireguard doesn't seem to like this. The alternative is to route my phone to home for 100% of traffic, and my home router would egress th…
Why not have a standing WG connection between your home and external WG server and connect only to the external server?
You then route your home traffic through the home wg connection and all other traffic will exit the external server directly.
Re: NetMaker: Connect Everything with a WireGuard VPN
#55Earlier quoted context omitted.
[flagged]
Or maybe, just maybe, posting a comment that is egregiously outside the guidelines of the site means that people will see it and appropriately flag it. Not everything is political and it’s showing that that is what you immediately jumped to. > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes. > Please don't use Hacker News for political or ideological battle. That tramples curiosity.…
Seeing as this service(?) is, quote, "Backed by Y Combinator" I decided being nice about it on Y Combinator isn't worth my time nor that of any readers passing by.
Not to mention websites breaking my scroll bar and disrespecting my time are so common these days they indeed really aren't interesting, which is all the more reason to call them out nicely or otherwise.
Re: NetMaker: Connect Everything with a WireGuard VPN
#56This thing seems to open a whole lot of attack vectors in addition to wireguard's ports. Is it worth it?
if you can point out the vectors that worry you maybe other will be able to address them sooth your worries
Re: NetMaker: Connect Everything with a WireGuard VPN
#57The feature list reminded me of Tailscale so I went looking and found this on their website: https://www.netmaker.io/resources/tailscale-vs-zerotier Their comparison graph at the bottom seems to indicate that the differentiating features between their product and Tailscale is that you can't self-host (ignoring the existence of headscale) and that WireGuard support is limited. I believe the latter point refers to the…
Is the kernel module how they claim the 5x performance over tailscale? I haven't really done any real tailscale performance metrics but can't see how else they can claim this (unless there is infrastructure performance differences).
My hazy understanding from previous conversations was the performance advantages claimed is basically how things were "out of the box" for comparison, for certain situations. However I've seen people claim the differences quickly close when someone that knows what they are doing optimizes a setup. Additionally other situations are much more similar.
The numbers Netmaker posted likely come from: https://medium.com/netmaker/battle-of-the-vpns-which-one-is-...
Note that a spreadsheet with raw data and command used (which is all `iperf3 -c `) is here: https://docs.google.com/spreadsheets/d/1Qy27zEERSqisdV1u-YUc...
While it's a good idea to be skeptical of a company tooting it's own horn, there does (or has) seemed to be a consistent performance advantage that is beneficial to those who aren't paid for or like being a network admin beyond setting a proper MTU: https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerot...
However in light of https://tailscale.com/blog/more-throughput/ (thanks to FabHK for bringing this to my attention) testing should probably be redone.
Re: NetMaker: Connect Everything with a WireGuard VPN
#58Earlier quoted context omitted.
Afaik, tailscale recently made changes to their go user space implementation that actually made their version faster than the kernel implementation, at least in some cases. I remember reading a blog post on tailscacles' website about it and how they are pushing their changes upstream (wg kernel and official wg go user space implementation). Can't find the post now though.
I think this is the post you're referring to. https://tailscale.com/blog/more-throughput/
Yes that's the one.
Re: NetMaker: Connect Everything with a WireGuard VPN
#59Earlier quoted context omitted.
There's this handy website that calculates the allowed CIDRs with exclusions https://www.procustodibus.com/blog/2021/03/wireguard-allowed...
Semi-related: I really like the typeface/layout on that site!
Yeah same. I'm new to trying to find fonts, but it looks like it's "Forum" font family for the header and "Proza Libre" for the body
Re: NetMaker: Connect Everything with a WireGuard VPN
#60Tangent question about WireGuard: I use the VPN at work, but the DNS does not seem to be working properly on MacOS. The VPN is configured to use an internal IP for DNS, like 192.168.10.200, but when the VPN is on, that address is not routing properly (it seems the route is not going through the VPN so nothing is found, even if the VPN config does include that IP range). Anyone knows how to get this sort of stuff fixe…
Maybe it's because you have the dns ip on the allowed ips list, causing the dns queries to go through the tunnel?
tcpdump or a similar tool may be helpful in this case to see where / how traffic is handled.