Interesting, kinda reminds me of Nebula by Slack. https://github.com/slackhq/nebula https://github.com/slackhq/nebula - which I hope someday there's a CNI for P

Interesting, kinda reminds me of Nebula by Slack. https://github.com/slackhq/nebula https://github.com/slackhq/nebula - which I hope someday there's a CNI for Podman and Docker. I guess right now you have to run these solutions inside of the same container you want to allow in the network, so have to build it apart of your image... unless maybe you had your own custom base image with the VPN software loaded and just pass in the auth cert info at runtime. However tailscale has a polished UI it looks from the screenshots, maybe meant more for employees to use than using it for all the server to server stuff. I've been playing around with an idea on and off I was planning to use some sorta tech like this but seems like stuff is improving. Like early this year Podman folks are going to adopt a API like Docker instead of Varlink. Varlink seems cool too but I guess not as many people wanted to support it and then no lib for every language or runtime like Node.js, etc. Also even if your own private network, still recommended to encrypt and authenticate internal services talking to each others. but I guess it's like having multiple layers.