3 ms·

I cannot wait to start using this as it looks like it will make vpn's a heck of a lot easier to manage. Here are my two questions: 1. Is it possible to use the

by chaz6 6y ago

I cannot wait to start using this as it looks like it will make vpn's a heck of a lot easier to manage. Here are my two questions: 1. Is it possible to use the same subnet on different innernets? 2. Could you please provide installation instructions for generic linux, as I am looking to host on almalinux and opensuse leap, neither of which use dpkg. Thanks for sharing!

moviuro 6y ago
Regarding 1.: no. AllowedIPs in the WireGuard world have the double meaning: * I expect anything coming from that peer to have an IP address in AllowedIPs * I know that a peer's AllowedIPs can only be reached through that specific peer Also, RFC 1918 lists 2^24 + 2^20 + 2^16 = 17 million IPs. You should normally not have an issue finding networks that don't overlap. 10/8, 172.16/12 and 192.168/16 Also, using the same net on different interfaces would probably confuse your server. Maybe if you do some magic with VRFs you could. (And it doesn't mean you should)
clpwn 6y ago
> 1. Is it possible to use the same subnet on different innernets? As moviuro mentioned, no, not unless you want to get fancy with independent network namespaces (https://man7.org/linux/man-pages/man8/ip-netns.8.html https://man7.org/linux/man-pages/man8/ip-netns.8.html). If you want to be more confident of not having an address space conflict, I recommend using a randomly generated private IPv6 block using the RFC 4193 specification: https://en.wikipedia.org/wiki/Private_network#Private_IPv6_addresses https://en.wikipedia.org/wiki/Private_network#Private_IPv6_a... > 2. Could you please provide installation instructions for generic linux, as I am looking to host on almalinux and opensuse leap, neither of which use dpkg. Our Arch PKGBUILD (https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=innernet https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=inner...) may be the simplest existing guide for making your own package for your distro. If it's not a lot of work to add, I'm happy to maintain other package formats, or help you be a maintainer. Thanks! Looking forward to hearing how it goes for you.

by chaz6 6y ago

moviuro 6y ago

Regarding 1.: no. AllowedIPs in the WireGuard world have the double meaning: * I expect anything coming from that peer to have an IP address in AllowedIPs * I know that a peer's AllowedIPs can only be reached through that specific peer Also, RFC 1918 lists 2^24 + 2^20 + 2^16 = 17 million IPs. You should normally not have an issue finding networks that don't overlap. 10/8, 172.16/12 and 192.168/16 Also, using the same net on different interfaces would probably confuse your server. Maybe if you do some magic with VRFs you could. (And it doesn't mean you should)

clpwn 6y ago

> 1. Is it possible to use the same subnet on different innernets? As moviuro mentioned, no, not unless you want to get fancy with independent network namespaces (https://man7.org/linux/man-pages/man8/ip-netns.8.html https://man7.org/linux/man-pages/man8/ip-netns.8.html). If you want to be more confident of not having an address space conflict, I recommend using a randomly generated private IPv6 block using the RFC 4193 specification: https://en.wikipedia.org/wiki/Private_network#Private_IPv6_addresses https://en.wikipedia.org/wiki/Private_network#Private_IPv6_a... > 2. Could you please provide installation instructions for generic linux, as I am looking to host on almalinux and opensuse leap, neither of which use dpkg. Our Arch PKGBUILD (https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=innernet https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=inner...) may be the simplest existing guide for making your own package for your distro. If it's not a lot of work to add, I'm happy to maintain other package formats, or help you be a maintainer. Thanks! Looking forward to hearing how it goes for you.