4 ms·

I saw MeshBird[1] on GitHub the other day and while I haven't tried it out yet I really love the idea. [1]https://github.com/meshbird/meshbird https://github.c

• Skunkleton 11y ago
  That one also piqued my interest. I am however still trying to understand what it gets you over something like OpenVPN. Maybe it is simply an alternative?
  • vruiz 11y ago
    If I understood it correctly it would be an alternative to OpenVPN but without central server or configuration, you run meshbird on every node setting it up with a one liner.
    • miolini 11y ago
      :+1:
  • zokier 11y ago
    On a quick glance Meshbird seems to be closer to Tinc than OpenVPN.
    • miolini 11y ago
      I'm author of Meshbird. Big different between Tinc and Meshbird. When you start Tinc you have to specify other node addresses. When you start Meshbird you have to specify network secret key only. Meshbird's node will find each others automaticly.
• mentat 11y ago
  The idea is nice but the crypto has some gaps.
  • lenish 11y ago
    For anyone else wondering, they're using AES-CBC with no MAC: https://github.com/meshbird/meshbird/blob/master/secure/crypt.go https://github.com/meshbird/meshbird/blob/master/secure/cryp... Should at least use a decent HMAC construction, but would be better to switch to AES-GCM. There's an issue filed for it: https://github.com/meshbird/meshbird/issues/4 https://github.com/meshbird/meshbird/issues/4
    • miolini 11y ago
      Yeah, AES-GCM is better choice for our Meshbird. I've posted AES benchmarks in GO into golang-dev mailgroup. https://groups.google.com/forum/#!searchin/golang-dev/aes/golang-dev/bp8M7aUrw-0/RoZG9_3oCAAJ https://groups.google.com/forum/#!searchin/golang-dev/aes/go...
• weitzj 11y ago
  I think this is similar to zerotier.com And this just works