3 ms·
As mentioned in the comparison sections, other products use security tags to achieve this. So I'm assuming that it isn't supported except by relying on external
by McNutty 4y ago
As mentioned in the comparison sections, other products use security tags to achieve this. So I'm assuming that it isn't supported except by relying on external firewalls.
Also interesting to note no mention of zerotier anywhere in the doc or comparisons
- generalizations 4y agoYea, I inferred that was the purpose of the tags, though I didn't see the capability mentioned explicitly anywhere. It doesn't seem like a fundamental limitation; if innernet let a single machine have multiple wireguard interfaces, each on different subnets, that would seem to be an elegant solution. But I didn't see mention of that, either.
- McNutty 4y agoIIRC, what you suggested is exactly how zerotier implements it
- generalizations 4y agoHuh. I think you're right. Though, zerotier uses central servers, has a significant performance hit compared to a wireguard solution, and is an L2 rather than L3 solution (the last isn't really a downside though).