Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NetMaker: Connect Everything with a WireGuard VPN

netmaker.io

Post reply on HN
Print view View original

141–150 of 172 posts

Re: NetMaker: Connect Everything with a WireGuard VPN

#141

Post by latchkey »

afeiszli wrote: post #140
latchkey wrote: post #137

Earlier quoted context omitted.

Golang is relatively easy to unit test if the code is architected to enable it (with di-like patterns) and from experience, that will catch things that integration tests can easily miss. I would rather see both sets of tests for something dealing with security.

It's definitely lacking on the unit-testing side and we should do more there, but we think integration tests are the more important of the two in this scenario, because the most fragile bits are the interactions between client-client and client-server. It's a lot harder to self-contain those tests without deploying the platform and clients on various infrastructures.

i'd argue that is exactly what you want to unit test. any breakage of client->unit test client or server->unit test server, should be a big no no. otherwise you easily risk backwards compatible issues.

Re: NetMaker: Connect Everything with a WireGuard VPN

#142

Post by rcme »

papercrane wrote: post #131
rcme wrote: post #127

Earlier quoted context omitted.

Interesting. According to the article, it seems like the biggest complaint was that Mongo was a for-profit company and couldn’t be trusted? I agree that for-profit companies can’t be trusted, but I’m not sure I agree with the statement “that’s not open source because the license was written by a for-profit company”.

That article is obfuscating why the license was going to be rejected by the OSI. The OSI has as part of their definition of open-source that there can be no field of use discriminators. It had nothing to do with the fact that it was drafted by a commercial company. OSI has approved plenty of licenses drafted by for-profit companies (e.g. Intel, IBM, Microsoft.) https://blog.opensource.org/the-sspl-is-not-an-open-sour…

Thanks. That makes sense.

Re: NetMaker: Connect Everything with a WireGuard VPN

#144

Post by OfferFun6595 »

Netmaker is legit and backed by Y Combinator. It's based on Wireguard (like Tailscale) and is focused primarily around Kubernetes use. In my opinion, it is a better solution than any other zero trust networking solution due to it offering built in ACLs and traditional Wireguard/VPN features as well as the P2P encrypted mesh overlay.

You may find it easier to work with zerotier or tailscale, but NetMaker is something to keep an eye on. I met the founder at KubeCon last year and he's a really approachable and nice guy. You can always reach out to him directly if you have specific questions or concerns.

Re: NetMaker: Connect Everything with a WireGuard VPN

#146

Post by WirelessGigabit »

_rs wrote: post #35
winecamera wrote: post #23

Earlier quoted context omitted.

Assuming your Wireguard server at home is running Linux, you can achieve this by adding a second routing table and adding routing policies.

Is it not possible to configure this on the phone itself?

No as on most phones you cannot set up static routes.

Re: NetMaker: Connect Everything with a WireGuard VPN

#147

Post by WirelessGigabit »

hackermeows wrote: post #5

Why is this better than running wireguard directly on a cheap instance .

WireGuard to this date prefers A records over AAAA records which means if I'm on an 464xlat network I end up connecting over a ISP's owned proxy.

Many people have complained, and there is zero response to it.

Tailscale does it a LOT better.

Re: NetMaker: Connect Everything with a WireGuard VPN

#148

Post by LiamCooper234 »

Does netmaker have the equivalent of tailscale's DERP servers yet that run on port 443 and proxy connections through https/websocket to bypass restrictive firewalls? Userland wireguard perf is worse than kernel wireguard but I don't want to give up DERP servers.

Re: NetMaker: Connect Everything with a WireGuard VPN

#149

Post by [deleted] »

tetris11 wrote: post #47
minimalist wrote: post #7

Related, from earlier this year: https://news.ycombinator.com/item?id=35584533 Wherein the author compares Yggdrasil, tinc, Tailscale, Zerotier, Netmaker, Nebula, and ends up prefering Yggdrasil. Actually, it was this comparison that made me look into Netmaker and prefer it and I've been running it without issue for experimentation. I hope the author revisits NM. I agree that the project is moving quickly, which resu…

> route coordination After reading the readme on the Github, it's still not clear to me whether it proxies everything through its own servers or not

[deleted]

Re: NetMaker: Connect Everything with a WireGuard VPN

#150

Post by PsychoOil »

I used for awhile. it served my need pretty well.

It can do fancy things but it's definitely geared towards more of a power user base.

I think it's main appeal over all of the other solutions (i hope this is still the case) is that it uses kernel level wireguard instead of userland wireguard so for performance it is unrivalled. It's what I would pick if I was setting up a mesh for servers that constantly talked to each other and exchanged a lot of data

Post reply on HN