Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard on K8s: road-warrior-style VPN server

blog.levine.sh

Post reply on HN
Print view View original

1–10 of 54 posts

Re: WireGuard on K8s: road-warrior-style VPN server

#2

Post by vpner »

GitHub has several projects that automate setting up a wireguard VPN on various cloud VMs without K8s: https://github.com/topics/wireguard. There's also this tutorial that sets up a VPN along with proper DNS configuration so that DNS doesn't leak: https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-set....

Re: WireGuard on K8s: road-warrior-style VPN server

#5

Post by microcolonel »

Well, there's road-warrior, and then there's road-warrior.

I've been trying out Glorytun, it does multi-path VPN with a relatively similar wire format to WireGuard. Being mostly indoors, due to the microbial boogaloo, I've not been trying it with the most interesting applications.

Re: WireGuard on K8s: road-warrior-style VPN server

#6

Post by jcims »

microcolonel wrote: post #5

Well, there's road-warrior, and then there's road-warrior . I've been trying out Glorytun, it does multi-path VPN with a relatively similar wire format to WireGuard. Being mostly indoors, due to the microbial boogaloo, I've not been trying it with the most interesting applications.

Would like to use something like this to aggregate a few DSL connections. Any idea how well it works for that use case?

Re: WireGuard on K8s: road-warrior-style VPN server

#7

Post by microcolonel »

jcims wrote: post #6
microcolonel wrote: post #5

Well, there's road-warrior, and then there's road-warrior . I've been trying out Glorytun, it does multi-path VPN with a relatively similar wire format to WireGuard. Being mostly indoors, due to the microbial boogaloo, I've not been trying it with the most interesting applications.

Would like to use something like this to aggregate a few DSL connections. Any idea how well it works for that use case?

It seems to work well when the connections are of roughly equal speed and stability, so that sounds like a rather ideal use case. :+ )

I think it'll need work for connections with varied performance.

Re: WireGuard on K8s: road-warrior-style VPN server

#8

Post by 0az »

wferrell wrote: post #4

Worth taking look at http://tailscale.com - Their tag line: Private networks made easy. No affiliation -- just like their product.

My main annoyance with Tailscale is the reliance on Google. I need to refresh my memory, but I think this makes a VLAN shared with other people impossible.

This is why I'm still using https://zerotier.com -- also no affiliation.

Re: WireGuard on K8s: road-warrior-style VPN server

#9

Post by pot8n »

0az wrote: post #8
wferrell wrote: post #4

Worth taking look at http://tailscale.com - Their tag line: Private networks made easy. No affiliation -- just like their product.

My main annoyance with Tailscale is the reliance on Google. I need to refresh my memory, but I think this makes a VLAN shared with other people impossible. This is why I'm still using https://zerotier.com -- also no affiliation.

Honestly that's the least of all problems and catastrophes of Tailscale. You must have 1000% of confidence in their own servers security, if the published public keys hosted on their servers have been tampered then the entire network is compromised. Also, if their service is down, you will be unable to connect to your network even if it is completely fine and working.
Post reply on HN