afeiszli

5 ms·

1.
by afeiszli 3y ago
Blog post for context: https://www.netmaker.io/resources/netmaker-goes-open-source-...
2.
by afeiszli 3y ago
It's definitely lacking on the unit-testing side and we should do more there, but we think integration tests are the more important of the two in this scenario, because the most fragile bits are the interactions between client-client a
3.
by afeiszli 3y ago
Worth noting, the WireGuard creator has specifically mentioned these sort of management features (user auth, automated configuration and coordination, ACL's) as out-of-scope of the WireGuard project. He wanted to keep it as simple as p
4.
by afeiszli 3y ago
You can lock it down a good amount: - 80 is only required for Caddy to request certificates. If you BYO certs, you can take that off - TURN is optional, so if you disable TURN then dont need 3479 or 8089 - The remaining ports are only for
5.
by afeiszli 3y ago
We do have a CLA, and put it in place for this very reason. It is more complex legally, but I meant more in terms of the community. Better to make people happy by going less restrictive over time then to start out with Apache and switch to
6.
by afeiszli 3y ago
I think it's worth doing your own investigation on how often traffic is getting relayed via Tailscale. We don't have numbers on it, but have had users who experienced very high latency with Tailscale, and after doing some traffic
7.
by afeiszli 3y ago
Netmaker also has a relay setup, when you don't want to do P2P: https://www.netmaker.io/features/relay
8.
by afeiszli 3y ago
SSPL is a bit more restrictive, but politics also have a lot to do with it. "Open Source" is just a term, technically anyone could call their license open source, but most people only consider a license open source if the OSI (a f
9.
by afeiszli 3y ago
Kilo is cool! And works. It will be similar, just sort of depends on what you're comfortable with and what sort of management features you need. Some people like a UI where they can see all their nodes and troubleshoot without having t
10.
by afeiszli 3y ago
Netmaker guy here, and I'll be the first to tell you that if you have a static setup of, let's say 5 machines or less, then there's no need for something as complex as Netmaker. It's really useful for people who have man
11.
by afeiszli 3y ago
NAS should work if it's linux or freebsd based. For mobile you (currently) have to use our "client gateway", which accesses the network just using a regular WireGuard config file, which you can scan from the Netmaker UI using
12.
by afeiszli 3y ago
Thanks for the feedback. Just wondering, with 0.0.0.0, are you accessing using "external clients" or the regular netclient?
13.
by afeiszli 3y ago
Netmaker may help with this. You configure an "Egress Gateway" to 0.0.0.0/0 as your internet VPN, inside of a Netmaker network of 10.10.0.0/24. We do our routing rules differently and it is meant to be compatible. Howeve
14.
by afeiszli 3y ago
You might find the github or docs more helpful, which are more geared to a technical audience: - https://github.com/gravitl/netmaker - https://docs.netmaker.io/
15.
by afeiszli 3y ago
Hi, worth noting another point on this. Netmaker has "Client Gateways", which allow you to generate and modify raw WireGuard config files. This is extremely useful for integrating custom WireGuard setups. For instance, generate a
16.
by afeiszli 3y ago
Hi! Netmaker here. At the time of this writing this is true, but we're making some licensing changes this sprint, which I think will make people very happy. We started with SSPL just because it's much easier to go from more restri
17.
by afeiszli 3y ago
Really cool!
18.
by afeiszli 4y ago
We decided to use Lago with our SaaS. Billing is super complicated and Lago handles everything we need out of the box. Building this stuff would have been a nightmare. Really cool!
19.
by afeiszli 4y ago
Yeah that’s what we used, but not all Linux supports it, and that still leaves non-Linux as well. But hosts files are universal.
20.
by afeiszli 4y ago
Split DNS is super complicated to implement client side. We halfway implemented a solution and backtracked, eventually settling on just setting /etc/hosts. There's way too many variables involved across all the different oper
21.
by afeiszli 4y ago
You can do a WireGuard server on Kubernetes with Netmaker: - https://itnext.io/multi-cluster-kubernetes-networking-with-n... - https://itnext.io/multi-cluster-kubernetes-networking-with-n...
22.
by afeiszli 4y ago
You can run WireGuard in a docker client without giving it access to your internal networks.
23.
by afeiszli 4y ago
Hey! Netmaker author here. I think it’d be a cool option for this use case. We have some users already doing blockchain stuff. Benefits are it’s self hosted, so you don’t need to depend on a SaaS, no mandatory 3rd party auth, and a lot fast
24.
by afeiszli 4y ago
We don't have our own mobile client yet, so right now we rely on the WireGuard app. You configure a gateway, and then generate raw WireGuard configs + QR codes which hook them into the network: https://docs.netmaker.org&#x2F
25.
by afeiszli 4y ago
I'd like to offer Netmaker as an alternative. Caveat, I'm one of the creators so grain of salt, etc. It's completely self-hosted, so none of your traffic will go through our servers. You can also use basic auth by default (th
26.
Ask HN: How can tech startups help Ukraine?
1 points by afeiszli 5y ago|0 comments
27.
by afeiszli 5y ago
Check out Netmaker if you're looking for something WireGuard based. We had a post about it a couple weeks ago: https://news.ycombinator.com/item?id=29809830
28.
by afeiszli 5y ago
Netmaker repo owner here. Let us know if you have any questions and we can help out!
29.
by afeiszli 5y ago
Currently auth is limited to OAuth integration with Google, Azure, and GitHub, but we'll be building this out in the coming months.
30.
by afeiszli 5y ago
Routers are hard because they all have their custom OS's, and we need to do system level stuff besides just WireGuard. We're open to expanding the range where needed, and will happily support anyone in the community who wants to p

More ›