Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NetMaker: Connect Everything with a WireGuard VPN

netmaker.io

Post reply on HN
Print view View original

91–100 of 172 posts

Re: NetMaker: Connect Everything with a WireGuard VPN

#91

Post by ttyprintk »

fer wrote: post #75
minimalist wrote: post #7

Related, from earlier this year: https://news.ycombinator.com/item?id=35584533 Wherein the author compares Yggdrasil, tinc, Tailscale, Zerotier, Netmaker, Nebula, and ends up prefering Yggdrasil. Actually, it was this comparison that made me look into Netmaker and prefer it and I've been running it without issue for experimentation. I hope the author revisits NM. I agree that the project is moving quickly, which resu…

I'd add to that list Netbird, which is the one I ended up using after trying all of the above. https://netbird.io/

From the Netbird ShowHN[0], people also mention OpenZiti:

https://news.ycombinator.com/item?id=34310561

[0]: https://news.ycombinator.com/item?id=31551686

Re: NetMaker: Connect Everything with a WireGuard VPN

#92

Post by LeBit »

intelVISA wrote: post #65
rudasn wrote: post #26

Earlier quoted context omitted.

Afaik, tailscale recently made changes to their go user space implementation that actually made their version faster than the kernel implementation, at least in some cases. I remember reading a blog post on tailscacles' website about it and how they are pushing their changes upstream (wg kernel and official wg go user space implementation). Can't find the post now though.

Go is a bit too slow for performant networking - not sure why people are hell-bent on forcing it into such spaces where it doesn't fit.

Please, elaborate or provide sources.

Re: NetMaker: Connect Everything with a WireGuard VPN

#93

Post by LeBit »

barrotes wrote: post #68

Maybe a dumb question, but what are the advantages of such products compared to just configuring a "plain" wireguard server i.e. on OpenBSD? I'm not a network expert and still it was pretty simple. Do these products offer more features? What kind of features?

Try to build a mesh with wireguard.

You will soon find you have a combinatorial problem. If you have 10 nodes and want to add an 11th node, you will have to update the 10 already existing nodes.

These projects are automating the configuration of the nodes. You simply configure a new node and the other nodes are informed of the presence of the new guy.

Re: NetMaker: Connect Everything with a WireGuard VPN

#94

Post by LeBit »

jdthedisciple wrote: post #51

While the website is an amazing show-off of modern web design, I'm not sure why I would need this as opposed to the dead simply good old tiny WireGuard client which just works perfectly.

Because you can't mesh at scale with wireguard (unless you have an infinite amount of monkeys).

Re: NetMaker: Connect Everything with a WireGuard VPN

#95

Post by LeBit »

notarget137 wrote: post #31
zupzupper wrote: post #6

Earlier quoted context omitted.

These over the top services handle node discovery and meshing for you, instead of you having to feed configurations manually down to each device you want to hook up to wireguard. Convenience features etc

For a non-network person that is surely a convinience. I prefer pushing my configs through ansible and not thinking about it.

But then you cannot scale.

You do not see the problem because you probably manage less than 5 nodes.

Re: NetMaker: Connect Everything with a WireGuard VPN

#96

Post by LeBit »

jbverschoor wrote: post #64
FabHK wrote: post #20

Earlier quoted context omitted.

This article (titled "Tailscale vs ZeroTier") actually compares Tailscale, ZeroTier, and Netmaker: https://www.netmaker.io/resources/tailscale-vs-zerotier

The quality of information is very limited. It's as if the author hasn't used ZeroTier... ZeroTier operates on a different layer, and is therefore capable of much more than anything wireguard.

Like what?

Re: NetMaker: Connect Everything with a WireGuard VPN

#97

Post by PLG88 »

ttyprintk wrote: post #91
fer wrote: post #75

Earlier quoted context omitted.

I'd add to that list Netbird, which is the one I ended up using after trying all of the above. https://netbird.io/

From the Netbird ShowHN[0], people also mention OpenZiti: https://news.ycombinator.com/item?id=34310561 [0]: https://news.ycombinator.com/item?id=31551686

fwiw, OpenZiti is permissively licensed under Apache2.0 as well. I work on the project.

Re: NetMaker: Connect Everything with a WireGuard VPN

#98

Post by api »

freyes wrote: post #80
fmajid wrote: post #76

Earlier quoted context omitted.

I don't have much sympathy for that argument. AGPL (or dual-licensed AGPL + commercial) is the simple countermeasure for freeloaders. Most tech companies won't touch it with a 20-foot pole.

> Most tech companies won't touch it with a 20-foot pole. This!, in my experience lawyers will deny the use of AGPL software, even when there is no risk (from my point of view). Many companies have already a list of blessed licenses, and AGPL is not part of the ones I'm aware of.

This phenomenon is mostly just GPL-phobia. Microsoft spent billions in the 90s to convince corporate legal that the GPL is "viral" in ways it is not. You could simply rename the license to something other than the letters G-P-L and this would go away.

Re: NetMaker: Connect Everything with a WireGuard VPN

#99

Post by ttyprintk »

jdthedisciple wrote: post #51

While the website is an amazing show-off of modern web design, I'm not sure why I would need this as opposed to the dead simply good old tiny WireGuard client which just works perfectly.

Their angle is SSO and 2FA for auth, targeted at enterprise customers who often need to meet compliance.

Re: NetMaker: Connect Everything with a WireGuard VPN

#100

Post by PLG88 »

yewenjie wrote: post #84

Has anyone tried hosting "dark" APIs at scale via any of these options?

Define 'scale'? The earlier mentioned OpenZiti has a bunch of deployments for making APIs 'dark'... in fact, here is a blog from a community memeber - https://medium.com/@rcarrascosps/how-to-create-apis-as-dark-....

Disclaimer, I work for NetFoundry, the company behind open source OpenZiti.

Post reply on HN