5 ms·

https://zerotier.com https://zerotier.com does a very nice job of NAT "bouncing", free (hosted) for up to 50 hosts, or you can run your own. You end up with an

by _hyn3 6y ago

https://zerotier.com https://zerotier.com does a very nice job of NAT "bouncing", free (hosted) for up to 50 hosts, or you can run your own. You end up with another "zt" interface, so you can apply firewall rules to that interface, separate from your main NIC(s), kinda like assigning your own VPC but for your laptop, etc. It only takes a few seconds to install the agent and join your private network, and it seems to reconnect quite nicely as well; if your network is private, you can force all new attempts to connect to be approved (where you can check the mac address first). Basically, it's exactly the right level of technical config traits with a simple interface. (no affiliation, just a very happy user, but I will say that running your own seems to be a lot more difficult than it should be..)

aftbit 6y ago
Is zerotier FLOSS? I have been looking for something to fulfill this need, but especially after the Solarwinds hack, I am unwilling to run a closed-source agent on any of my hosts.
- evil-olive 6y ago
  Looks like the Business Source License [0]. Which does not qualify under the Open Source Definition [1], but they claim it meets "most" of the OSI criteria. 0: https://github.com/zerotier/ZeroTierOne/blob/master/LICENSE.txt https://github.com/zerotier/ZeroTierOne/blob/master/LICENSE.... 1: https://mariadb.com/bsl-faq-adopting/#osl https://mariadb.com/bsl-faq-adopting/#osl
  - jlgaddis 6y ago
    > ... but they claim it meets "most" of the OSI criteria. As Frank Robinson [0] once said: > "[...] Close only counts in horseshoes [1] and hand grenades." -- [0]: https://en.wikipedia.org/wiki/Frank_Robinson https://en.wikipedia.org/wiki/Frank_Robinson [1]: https://en.wikipedia.org/wiki/Horseshoes https://en.wikipedia.org/wiki/Horseshoes (for the uninitiated)
    - ncmncm 6y ago
      Then again, "Good enough is good enough" http://www.basicinstructions.net/basic-instructions/2019/8/13/how-to-explain-why-star-trek-is-much-better-than-star-wars?rq=%22good%20enough%22 http://www.basicinstructions.net/basic-instructions/2019/8/1...
- _hyn3 6y ago
  https://github.com/zerotier/ZeroTierOne https://github.com/zerotier/ZeroTierOne
d33lio 6y ago
This is also my go-to. It's dead simple and just works. Tbh, the last thing I want to spend my time doing is tinkering with my personal "network architecture". I'm sure I'd manage to fuck it up at some point when I just want to reach my plex server and watch a movie.

by _hyn3 6y ago

aftbit 6y ago

Is zerotier FLOSS? I have been looking for something to fulfill this need, but especially after the Solarwinds hack, I am unwilling to run a closed-source agent on any of my hosts.

evil-olive 6y ago
Looks like the Business Source License [0]. Which does not qualify under the Open Source Definition [1], but they claim it meets "most" of the OSI criteria. 0: https://github.com/zerotier/ZeroTierOne/blob/master/LICENSE.txt https://github.com/zerotier/ZeroTierOne/blob/master/LICENSE.... 1: https://mariadb.com/bsl-faq-adopting/#osl https://mariadb.com/bsl-faq-adopting/#osl
- jlgaddis 6y ago
  > ... but they claim it meets "most" of the OSI criteria. As Frank Robinson [0] once said: > "[...] Close only counts in horseshoes [1] and hand grenades." -- [0]: https://en.wikipedia.org/wiki/Frank_Robinson https://en.wikipedia.org/wiki/Frank_Robinson [1]: https://en.wikipedia.org/wiki/Horseshoes https://en.wikipedia.org/wiki/Horseshoes (for the uninitiated)
  - ncmncm 6y ago
    Then again, "Good enough is good enough" http://www.basicinstructions.net/basic-instructions/2019/8/13/how-to-explain-why-star-trek-is-much-better-than-star-wars?rq=%22good%20enough%22 http://www.basicinstructions.net/basic-instructions/2019/8/1...
_hyn3 6y ago
https://github.com/zerotier/ZeroTierOne https://github.com/zerotier/ZeroTierOne

d33lio 6y ago

This is also my go-to. It's dead simple and just works. Tbh, the last thing I want to spend my time doing is tinkering with my personal "network architecture". I'm sure I'd manage to fuck it up at some point when I just want to reach my plex server and watch a movie.