4 ms·
Install the software on each machine you want in the network, servers and clients. Any machine in your network can connect to any other machine when it wants to
by crawshaw 7y ago
Install the software on each machine you want in the network, servers and clients. Any machine in your network can connect to any other machine when it wants to send a packet.
The protocol is pure wireguard, but it's a little tricky to generate direct configs for it from the Tailscale network, for various reasons I really should write up in a blog post.
(Tailscale cofounder.)
- akerl_ 7y agoHow are connections handled if both devices are behind NAT?
- crawshaw 7y agoWe adapt the tricks from RFC 8445 to WireGuard so two nodes behind NAT routers can find each other.
- namibj 7y agoThanks for this. I was planning a similar setup with udpspeeder and possibly an anycast core with fallback to e.g. iodine if the network is that broken. This was motivated by things like to ~80% downstream packet loss my grandma's DOCSIS 3 link had (likely due to bad wiring in her apartment complex, as DVB-C was similarly impacted), which broke things _hard_. I quickly went to dialing aria2c way up in powerpill for archlinux package upgrades. Other times I have dual/triple/quadruple homed hosts (to be fair, I won't have the quad-homed host for a while, because it's dual-provider LTE + wifi + 1000BASE-T, LTE + 2.4G wifi + 5G wifi + 1000BASE-T, or some other dual-mode wireless that will require hacking two cards into the laptop and for wifi also getting a 2.4 vs. 5.8 diplexer so the cards can share the same antennas without interfering with each other too much.