3 ms·
Very cool project. One thing that seems lacking, however, is the ability to join a single machine into multiple subnets - what if, based on the example given ha
by generalizations 4y ago
Very cool project. One thing that seems lacking, however, is the ability to join a single machine into multiple subnets - what if, based on the example given halfway down the page here [0], I wanted to have access to resources in both the `engineering` and `straylight` subnets? It's not clear to me that innernet lets my computer be part of both, since 'you are your IP address'.
[0] https://blog.tonari.no/introducing-innernet https://blog.tonari.no/introducing-innernet
- McNutty 4y agoAs mentioned in the comparison sections, other products use security tags to achieve this. So I'm assuming that it isn't supported except by relying on external firewalls. Also interesting to note no mention of zerotier anywhere in the doc or comparisons
- generalizations 4y agoYea, I inferred that was the purpose of the tags, though I didn't see the capability mentioned explicitly anywhere. It doesn't seem like a fundamental limitation; if innernet let a single machine have multiple wireguard interfaces, each on different subnets, that would seem to be an elegant solution. But I didn't see mention of that, either.
- McNutty 4y agoIIRC, what you suggested is exactly how zerotier implements it
- generalizations 4y agoHuh. I think you're right. Though, zerotier uses central servers, has a significant performance hit compared to a wireguard solution, and is an L2 rather than L3 solution (the last isn't really a downside though).
- ok_dad 4y agoYou can only make "associations" between the subnets, I think, see: https://github.com/tonarino/innernet#adding-associations-between-cidrs https://github.com/tonarino/innernet#adding-associations-bet...