Live data from Hacker News

Iroh 1.0

iroh.computer

411–420 of 488 posts

Re: Iroh 1.0

#411
post #305

Earlier quoted context omitted.

Different network layer, no centralization, no authorities, DNS has nothing to do with making p2p connections, it's like the ballpark is not even in the same country

So it differs in implementation details, not in concept.

If you think that your phone number is equivalent to your home address then yes.

Re: Iroh 1.0

#412
post #406
post #329

Earlier quoted context omitted.

Its amazing to me how people can make a great a product. And then completely bury the lead because they are so deep into the guts of the system You explained the value proposition so well. The website just didnt get to the "why?" At all

> You explained the value proposition so well. No, it didn't. It shifted the burden of learning the value proposition to first knowing what Tailscale is exactly. And a response of "Duh, that's obvious", perhaps indicates being too deep in the guts of tailscale systems.

A big part of communication is knowing your audience. GP could have spent a bunch of time explaining what an "application" is, what a "network" is, etc. but he knew that most HN users are familiar with Tailscale, so leaning on that prior knowledge let him explain the concept in fewer words. That is effective communication.

Re: Iroh 1.0

#414

If you're new to Iroh, my mental model is roughly "Tailscale at the application layer instead of the network layer". If your question is, "why not just use Tailscale?", look at it from an app developer's perspective. If you want to release an app and have instances of your app be able to easily connect to each other, you could theoretically embeded Tailscale functionality into your app, but then the users of your app…

How do I add firewalls and proxies and logging to iroh connections? How do I revoke and re-issue iroh keys? Can I host iroh relays/gateways on my intranet? Until these questions are answered iroh will remain blocked.

https://docs.iroh.computer/

Re: Iroh 1.0

#415
post #329

Earlier quoted context omitted.

Its amazing to me how people can make a great a product. And then completely bury the lead because they are so deep into the guts of the system You explained the value proposition so well. The website just didnt get to the "why?" At all

That amazement is due to one of our largest and least realized critical mistakes as a civilization: no where are people taught how to effectively communicate. We have entire Colleges of Communications at every university, and what do they teach? How to execute mass manipulation, not how to convey understanding, not how to manage disagreements. These are not "mistakes" either, this distinct lack of teaching real commu…

[deleted]

Re: Iroh 1.0

#416

Earlier quoted context omitted.

Cisco Dynamic Multipoint VPN will start by connecting to a central VPN server and then learn the public IPs of endpoints and automatically create VPN tunnels to them. It can scale to thousands of endpoints.

Presumably this has significant literal costs (because Cisco) and maybe a hardware or virtual-appliance requirement?

Enterprise networking is neither simple or cheap but it should be reliable.

Re: Iroh 1.0

#417

Earlier quoted context omitted.

That explanation still seems overly complicated. Iroh isn't a VPN. Iroh just lets apps connect to each other, just like plain old TCP, but without the shackles of NAT, DNS and dynamic IP addresses that made that impossible. It's restoring simple P2P connectivity to the Internet.

And bypass all the firewalls if secret key of target machine is known?

You only need to know the public key of the target endpoint.

It will work even on very restrictive firewalls. Even if they outright ban UDP packets, we will fall back to the relay connection which is https/websocket.

Note that here is not a single keypair per machine, but per endpoint. You can have multiple endpoints on one machine.

Re: Iroh 1.0

#418
post #406
post #329

Earlier quoted context omitted.

Its amazing to me how people can make a great a product. And then completely bury the lead because they are so deep into the guts of the system You explained the value proposition so well. The website just didnt get to the "why?" At all

> You explained the value proposition so well. No, it didn't. It shifted the burden of learning the value proposition to first knowing what Tailscale is exactly. And a response of "Duh, that's obvious", perhaps indicates being too deep in the guts of tailscale systems.

Tailscale is a very well established company in the field, and if you didn't hear tailscale before, perhaps this product would not be so interesting for you, so it makes sense here.

Otherwise, everything would end up being a "Thing Explainer"[0].

[0]: https://en.wikipedia.org/wiki/Thing_Explainer

Re: Iroh 1.0

#419

Congrats! I think you should highlight more the IoT use case, It's a really great solution for devices that need to talk over multiple transports (Lora + IP) and to avoid the need for a VPN.

We have made some progress reducing the set of patches that is needed to get iroh to run on an esp32 with SPIRAM. We just need a little dependency reduction for it to fit, but other than that iroh 1.0 works out of the box now.

Re: Iroh 1.0

#420
post #355
post #302

Earlier quoted context omitted.

So instead of paying a subscription fee to Tailscale to support your distributed application, you pay a subscription fee to Iroh to support your distributed application. ( https://www.iroh.computer/pricing says $19/month for what most people will want to use it for). Either one will allow you to stop "concentrating distributed technology to a handful of centralized owners", but the "why not use tailscale" part of wha…

iroh is fully open source though, you can run your own relay server and not have any dependencies on number0

Headscale exists, not sure what the difference is in practice.
Post reply on HN