4 ms·

Avery Pennarun is one of the founders (aka apenwarr.ca). Avery’s one of the most knowledgeable folks about TCP I know and has been building virtual networks of

• crawshaw 7y ago
  Funnily enough this one isn't built on TCP. This overlay network uses WireGuard which moves packets over UDP. I guess Avery has had enough TCP for a while. :) (Tailscale cofounder here.)
• rsync 7y ago
  "Avery Pennarun is one of the founders (aka apenwarr.ca). Avery’s one of the most knowledgeable folks about TCP I know and has been building virtual networks of all kinds 20+ years." I really appreciate his (imo) inspired work on 'sshuttle'[1] which he no longer maintains. I really wish this project would get the attention and development it deserves... [1] https://github.com/sshuttle/sshuttle https://github.com/sshuttle/sshuttle
  • apenwarr 7y ago
    As far as I know, the person who took over maintaining sshuttle does a pretty good job - it still works well today on more platforms than ever. However, I've been thinking that the sshuttle model doesn't completely keep up with the way the world has been going since I first wrote it ~10 years ago. There's a lot more stuff in the cloud now! And you want to be connected to multiple locations, not just a single location, because your team's resources tend to be scattered over many locations. Tailscale is a more modern approach based on a similar philosophy: minimizing setup time and complexity, while relying on an existing mature layer for the cryptography part so we can't screw it up. (And yes, it's funny trying to argue both sides in a thread where I'm competing with myself :))