Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Our User-Mode WireGuard Year

fly.io

Post reply on HN
Print view View original

151–160 of 169 posts

Re: Our User-Mode WireGuard Year

#151

Post by atonse »

michaeldwan wrote: post #108
atonse wrote: post #101

Earlier quoted context omitted.

I’d love to hear more about this move away from Nomad. We haven’t had too good a time with nomad, but not sure if it’s just our limited understanding. It doesn’t help that there are very few people out there that know it.

We'll write about it when the time comes. To be fair, Nomad and Consul have served us well. Most of our troubles stem from abusing them in ways they weren't designed to handle.

That doesn’t surprise me. I think our biggest issue is not knowing it well enough and not being able to find people that know it.

At that point it doesn’t matter how good the tech is.

Re: Our User-Mode WireGuard Year

#152

Post by pier25 »

tptacek wrote: post #110
pier25 wrote: post #103

Not even 30 mins ago I set up WireGuard to connect to a PG instance on Fly. I expected this to be a headache but it took less than 5 mins to download WG, generate the conf with the fly CLI and paste it into WG. Done.

You shouldn't have to do this unless you want to (for instance, to make a permanent WireGuard connection) --- you can just run `flyctl proxy` to set up a connection to 5432/tcp.

Really?

I followed the instructions in their docs and that's what was recommended.

https://fly.io/docs/reference/postgres/#connecting-to-postgr...

Also, wouldn't I need to install Wireguard anyway to use fly proxy?

Re: Our User-Mode WireGuard Year

#153

Post by the_biot »

mrkurt wrote: post #149
the_biot wrote: post #148

Earlier quoted context omitted.

debug times out as well. curl output: flake: curl -v https://fly.io/blog/ -sS -o /dev/null -D- * Trying 2a09:8280:1::a:791... * TCP_NODELAY set * Connected to fly.io (2a09:8280:1::a:791) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/certs/ca-certificates.crt CApath: /etc/ssl/certs } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client…

Ok last thing, can you try `curl https://debug.fly.dev --ipv4` and tell me what the `Fly-Region` header says? Thank you for helping with this!

Fly-Region: fra

Re: Our User-Mode WireGuard Year

#154

Post by fuzzybear3965 »

zellyn wrote: post #138
fuzzybear3965 wrote: post #136

Earlier quoted context omitted.

Help me out. This threw me for a loop and Google wasn't helpful.

Weird. For me, every Google result for [entmoot] is appropriate and basically gives the answer to your question I would have given. It's a Lord of the Rings reference.

Right - I understood that it was the walking tree from Lord of the Rings. But, what does it mean for Consul to hold a walking tree?

Is it something like: "Consul bears a heavy weight (has a lot of responsibility and so responds slowly)"?

Re: Our User-Mode WireGuard Year

#155

Post by tptacek »

pier25 wrote: post #152
tptacek wrote: post #110

Earlier quoted context omitted.

You shouldn't have to do this unless you want to (for instance, to make a permanent WireGuard connection) --- you can just run `flyctl proxy` to set up a connection to 5432/tcp.

Really? I followed the instructions in their docs and that's what was recommended. https://fly.io/docs/reference/postgres/#connecting-to-postgr... Also, wouldn't I need to install Wireguard anyway to use fly proxy?

Nope! That's what this whole post is about. :)

Re: Our User-Mode WireGuard Year

#156

Post by vineyardmike »

pmarreck wrote: post #68
anderspitman wrote: post #33

Earlier quoted context omitted.

It depends on what sort of tunneling you're doing. If you just want a general-purpose private VPN, Tailscale is amazing. That list is more focused on the use case where you want to host a public server on a machine that isn't accessible to the internet (NAT, corporate firewall, etc). Think a shared Jellyfin server for your friends and family. You can use Tailscale here but you'll need to separately run a reverse-prox…

I wish I could run two separate Tailscale networks on a single device, one for business and one for personal (for example). Would make it tremendously more useful.

Is this different from sharing one device with other accounts?

Re: Our User-Mode WireGuard Year

#157

Post by chrissnell »

croon wrote: post #135
chrissnell wrote: post #97

Earlier quoted context omitted.

SLIP was a problem for us when I worked at an ISP in 1995. Cheapsakes would buy our barebones "shell access only" package and then run SLIP on our shell server. We eventually wrote a cron job to kill their processes when we found them. Sneaky ones just renamed the binary.

Man I miss the old internet when things were more playful and that was the extent of harm being done. Not that I condone cheapskates stealing your bandwidth. Maybe it's just rosy nostalgia.

Oh, believe me, that wasn't the worst. The worst was an undergrad in a university computer lab who harnessed many dozens of workstations to DDoS us off the net when he got into an IRC argument with someone.

Re: Our User-Mode WireGuard Year

#158

Post by croon »

chrissnell wrote: post #157
croon wrote: post #135

Earlier quoted context omitted.

Man I miss the old internet when things were more playful and that was the extent of harm being done. Not that I condone cheapskates stealing your bandwidth. Maybe it's just rosy nostalgia.

Oh, believe me, that wasn't the worst. The worst was an undergrad in a university computer lab who harnessed many dozens of workstations to DDoS us off the net when he got into an IRC argument with someone.

Haha, right, my nostalgia blocked off that part of it. That was definitely a thing. IRC BNC:s became mandatory to avoid the risk.

Re: Our User-Mode WireGuard Year

#159

Post by zellyn »

fuzzybear3965 wrote: post #154
zellyn wrote: post #138

Earlier quoted context omitted.

Weird. For me, every Google result for [entmoot] is appropriate and basically gives the answer to your question I would have given. It's a Lord of the Rings reference.

Right - I understood that it was the walking tree from Lord of the Rings. But, what does it mean for Consul to hold a walking tree? Is it something like: "Consul bears a heavy weight (has a lot of responsibility and so responds slowly)"?

A walking tree is an Ent. A meeting of Ents, with ponderous deliberation — ponderous on _Ent_ timescales, that is — is an Entmoot.

Re: Our User-Mode WireGuard Year

#160

Post by willstrafach »

the_biot wrote: post #153
mrkurt wrote: post #149

Earlier quoted context omitted.

Ok last thing, can you try `curl https://debug.fly.dev --ipv4` and tell me what the `Fly-Region` header says? Thank you for helping with this!

Fly-Region: fra

Different poster here but just curious: Are you a Deutsche Telekom user, by chance?
Post reply on HN