NetMaker: Connect Everything with a WireGuard VPN

Post by geek_at » Wed, Aug 16, 2023, 8:50 AM UTC

tetris11 wrote: post #47

minimalist wrote: post #7

Related, from earlier this year: https://news.ycombinator.com/item?id=35584533 Wherein the author compares Yggdrasil, tinc, Tailscale, Zerotier, Netmaker, Nebula, and ends up prefering Yggdrasil. Actually, it was this comparison that made me look into Netmaker and prefer it and I've been running it without issue for experimentation. I hope the author revisits NM. I agree that the project is moving quickly, which resu…

> route coordination After reading the readme on the Github, it's still not clear to me whether it proxies everything through its own servers or not

Post by darthrupert » Wed, Aug 16, 2023, 9:07 AM UTC

GhostWhisperer wrote: post #56

darthrupert wrote: post #48

This thing seems to open a whole lot of attack vectors in addition to wireguard's ports. Is it worth it?

if you can point out the vectors that worry you maybe other will be able to address them sooth your worries

Post by intelVISA » Wed, Aug 16, 2023, 9:35 AM UTC

rudasn wrote: post #26

bjconlan wrote: post #12

Earlier quoted context omitted.

Is the kernel module how they claim the 5x performance over tailscale? I haven't really done any real tailscale performance metrics but can't see how else they can claim this (unless there is infrastructure performance differences).

Afaik, tailscale recently made changes to their go user space implementation that actually made their version faster than the kernel implementation, at least in some cases. I remember reading a blog post on tailscacles' website about it and how they are pushing their changes upstream (wg kernel and official wg go user space implementation). Can't find the post now though.

Post by Borg3 » Wed, Aug 16, 2023, 9:59 AM UTC

Tigress8780 wrote: post #40

jasonjayr wrote: post #16

Earlier quoted context omitted.

Dormant, or stable? I've been running a tinc mesh network for eons w/ my systems and it's never given me any trouble. I use git to check in the 'hosts/' folder and add/remove hosts as needed, pull down to all the nodes, and they can all connect. I do wish the encryption + transport could be as performant as wireguard, but for my needs, I haven't been pushing it hard enough that it's a concern for me.

Tinc works, but is not really stable for my use case: strange network environment thanks to my school. It frequently falls into infinite loops, dropping all packets and fully use a CPU core (on Windows, Linux looks fine). It seems stable on an all-Linux network, but the moment a Windows client is added, things can go wrong. It also does not really have a decent mobile client.

Post by Borg3 » Wed, Aug 16, 2023, 10:06 AM UTC

jasonjayr wrote: post #16

yardstick wrote: post #14

Earlier quoted context omitted.

Tinc is dormant these days. Very little development going on. Cool concept, but limited performance and limited uptake. Their approach to mesh was neat at the time.

Dormant, or stable? I've been running a tinc mesh network for eons w/ my systems and it's never given me any trouble. I use git to check in the 'hosts/' folder and add/remove hosts as needed, pull down to all the nodes, and they can all connect. I do wish the encryption + transport could be as performant as wireguard, but for my needs, I haven't been pushing it hard enough that it's a concern for me.