5 ms·

I feel like the lede is buried here... If I'm reading correctly I can use flyctl to set up an SSH encrypted tunnel over user-space TCP/IP over wireguard encrypt

by aszs 5y ago

I feel like the lede is buried here... If I'm reading correctly I can use flyctl to set up an SSH encrypted tunnel over user-space TCP/IP over wireguard encrypted IP packets over UDP over WebSockets over HTTP over TLS encrypted TCP/IP? And not even just for fun, but to solve real problems in production. I can see why you might have mixed feelings about that!

withinboredom 5y ago
What’s even funnier is that if I read it right, it’s ipv6 only, and WSL in Windows doesn’t support IPV6 routing over WireGuard. The kernel is missing some important CONFIG flags when it was compiled to route the packets properly.
- mst 5y ago
  It's running its own TCP stack in userspace though so the hosting kernel's routing abilities aren't an issue. I am both impressed and horrified, and I mean that in the best possible way.
  - dolmen 5y ago
    > I am both impressed and horrified, and I mean that in the best possible way. This sentence style sounded familiar in my head. Looking at the username. Oh, of course, that's him!
    - mst 5y ago
      mstcat approves of this :D (for those who don't know, http://trout.me.uk/mstcat.jpg http://trout.me.uk/mstcat.jpg )