Live data from Hacker News

Surpassing 10Gb/S over Tailscale

tailscale.com

11–20 of 84 posts

Re: Surpassing 10Gb/S over Tailscale

#11
post #8

Earlier quoted context omitted.

I don't think I'd classify their zero-config p2p-style VPN as "simple" -- or at least, certainly not simple to replicate... More to the point, I hope their technology becomes commonplace & gratis a la LetsEncrypt for SSL Certificates.

I mean, setting up a WireGuard vpn is pretty darn simple, even into a k8s cluster. It’s not rocket science or anything; which is kinda my point. They make it too easy, and that worries me.

I've switched to tailscale because their nat busting is actually hard to do "by hand"

Re: Surpassing 10Gb/S over Tailscale

#12

Tailscale is awesome, so damn recommended. Taildrop (AirDrop for everything, included in Tailscale) is especially recommended, it makes it so damn easy to send files between all your devices.

https://tailscale.com/kb/1106/taildrop/ seems to be the docs.

It's the first I hear of this. I wonder if there's any big advantage of this for someone who is already using syncthing for the same purpose? Biggest thing I could hope for is that it's faster. But I generally don't keep Tailscale running on mobile because I don't need it to and don't like the persistent notification.

Re: Surpassing 10Gb/S over Tailscale

#14
Nice improvements! I'd be interested to see how much overhead tailscales magicsock adds and what a flamegraph after the change looks like. Mostly crypto or still a lot of networking syscall time?

Re: Surpassing 10Gb/S over Tailscale

#15
post #10

Pretty amazing that you can achieve such a throughput in a Golang userspace program. I wonder if other UDP based protocols like QUIC can attain those numbers as well.

Slack has a system called Nebula that's pretty adjacent to userspace WireGuard.

Nebula is a Tailscale clone

Re: Surpassing 10Gb/S over Tailscale

#16

I’ve really wanted to try tailscale. I fear I’ll like it, and I don’t want another company to have a monopoly on simple things so everyone forgets how to do them.

Tailscale is amazing. I was able to set up our AWS VPN with it in If this means I continue to forget how to run OpenVPN I consider that well worth it.

Re: Surpassing 10Gb/S over Tailscale

#17
post #16

I’ve really wanted to try tailscale. I fear I’ll like it, and I don’t want another company to have a monopoly on simple things so everyone forgets how to do them.

Tailscale is amazing. I was able to set up our AWS VPN with it in If this means I continue to forget how to run OpenVPN I consider that well worth it.

It's made putting internal apps in a private subnet on a VPC a very trivial process. Like took me an afternoon and works well for my small 40 person company.

Re: Surpassing 10Gb/S over Tailscale

#18

I’ve really wanted to try tailscale. I fear I’ll like it, and I don’t want another company to have a monopoly on simple things so everyone forgets how to do them.

Had similar feelings and did like it more then I thought I could.

My escape hatch from the monopoly is headscale[0] which I can self host.

[0] https://github.com/juanfont/headscale

Re: Surpassing 10Gb/S over Tailscale

#19
post #11

Earlier quoted context omitted.

I mean, setting up a WireGuard vpn is pretty darn simple, even into a k8s cluster. It’s not rocket science or anything; which is kinda my point. They make it too easy, and that worries me.

I've switched to tailscale because their nat busting is actually hard to do "by hand"

That’s sort of the problem, right. Joining two networks is pretty simple, once you do it a few times. I remember when it was mandatory to know how to set up an email server (for more than one user), configure a secure FTP (+ WebDAV for a little while), and probably other things I’ve totally forgetting about. These things were passed down from senior to junior like we pass down how to write Docker images, and set up our ide while those very simple services of yesterday have been eaten up by monopolies. I’m not saying we shouldn’t have services to make our lives easier… I’m saying we should have more of them. I’m not interested in this space, but someone who is should see this company and go “damn, these guys have validated an idea for me. Maybe I can take some of their pie.” Instead, we just give them more money …

Look at email. It’s basically a “lost technology” in that it is nearly impossible to self-host (though there are people out there doing it, there are very few modern guides from zero to production). Same with file sharing and IRC servers.

Maybe I’m just rambling in my “old” age…

Re: Surpassing 10Gb/S over Tailscale

#20
post #8

Earlier quoted context omitted.

I don't think I'd classify their zero-config p2p-style VPN as "simple" -- or at least, certainly not simple to replicate... More to the point, I hope their technology becomes commonplace & gratis a la LetsEncrypt for SSL Certificates.

I mean, setting up a WireGuard vpn is pretty darn simple, even into a k8s cluster. It’s not rocket science or anything; which is kinda my point. They make it too easy, and that worries me.

Setting up a few p2p wg VPNs is manageable.

However, when you have 10 nodes and need to add one more node, you now need to update all other nodes so they can speak p2p. Management with scale is the struggle.

Post reply on HN