11–20 of 54 posts
Is there any reason why OP installs iproute2 and iptables not in the builder together with the wireguard package but in the final container image?
Is there any reason why OP installs iproute2 and iptables not in the builder together with the wireguard package but in the final container image?
The packages installed in the builders are essentially never used since it never runs. The builder makes the files to install in the final container during the build phase, and then gets thrown away.
apt-get install -y --no-install-recommends wireguard-tools
So no need to use a builder image
Earlier quoted context omitted.
Would like to use something like this to aggregate a few DSL connections. Any idea how well it works for that use case?
It seems to work well when the connections are of roughly equal speed and stability, so that sounds like a rather ideal use case. :+ ) I think it'll need work for connections with varied performance.
Earlier quoted context omitted.
My main annoyance with Tailscale is the reliance on Google. I need to refresh my memory, but I think this makes a VLAN shared with other people impossible. This is why I'm still using https://zerotier.com -- also no affiliation.
Honestly that's the least of all problems and catastrophes of Tailscale. You must have 1000% of confidence in their own servers security, if the published public keys hosted on their servers have been tampered then the entire network is compromised. Also, if their service is down, you will be unable to connect to your network even if it is completely fine and working.
The hosted Tailscale product is meant for GSuite customers who want an peer-to-peer VPN with corporate SSO. Yes, you have to trust them - SSO login is inherently centralized. My company uses it, it works great.
Anyway, on the topic of scalable UDP services, does anyone have any experience of load balancing a UDP service? Because UDP is connectionless there's no obvious way to make UDP packets "sticky". Are there any established practices that could help scale this k8s Wireguard service to 2 or more containers?
Well, there's road-warrior, and then there's road-warrior . I've been trying out Glorytun, it does multi-path VPN with a relatively similar wire format to WireGuard. Being mostly indoors, due to the microbial boogaloo, I've not been trying it with the most interesting applications.
Would like to use something like this to aggregate a few DSL connections. Any idea how well it works for that use case?
Earlier quoted context omitted.
Honestly that's the least of all problems and catastrophes of Tailscale. You must have 1000% of confidence in their own servers security, if the published public keys hosted on their servers have been tampered then the entire network is compromised. Also, if their service is down, you will be unable to connect to your network even if it is completely fine and working.
Tailscale is open source, it should be possible to set up your own server. The hosted Tailscale product is meant for GSuite customers who want an peer-to-peer VPN with corporate SSO. Yes, you have to trust them - SSO login is inherently centralized. My company uses it, it works great.
Earlier quoted context omitted.
Honestly that's the least of all problems and catastrophes of Tailscale. You must have 1000% of confidence in their own servers security, if the published public keys hosted on their servers have been tampered then the entire network is compromised. Also, if their service is down, you will be unable to connect to your network even if it is completely fine and working.
Tailscale is open source, it should be possible to set up your own server. The hosted Tailscale product is meant for GSuite customers who want an peer-to-peer VPN with corporate SSO. Yes, you have to trust them - SSO login is inherently centralized. My company uses it, it works great.