3 ms·
> With a little bit of effort you can run a userspace WireGuard on the Nanos unikernel, combining the security of WireGuard and unikernels to make a secure VPN
by exabrial 5y ago
> With a little bit of effort you can run a userspace WireGuard on the Nanos unikernel, combining the security of WireGuard and unikernels to make a secure VPN gateway
What a time to be alive... we can create a single purpose operating system, to run under a hypervisor, to forward traffic inside a NAT firewall, with patches applied that bypass the separation of user-space configuration parsing and move them into kernel functions.
- chris37879 5y agoIt's just sandboxing taken to the extreme. The idea of freestanding (meaning requiring nothing more than the hardware to run) applications isn't anything new, in fact it's how all old applications worked! And doing it this way gives you a lot more control over the execution environment. Though, from a certain point of view it's starting to look more and more like we're just making an operating system who's components are separated by IP address space instead of traces through silicon.
- Spivak 5y agoYeah, I always get a kick when we deploy containers that don’t do anything other than set up some kernel networking structures and then more or less just sleep. Truly the future of devops.