3 ms·
"'d love to see an in-line form factor PoE ultra minimal dongle whose only job in life is to run Wireguard ..." This is a type of "network slug"[1][2] and it i
by rsync 3y ago
"'d love to see an in-line form factor PoE ultra minimal dongle whose only job in life is to run Wireguard ..."
This is a type of "network slug"[1][2] and it is a very good idea.
An immutable, two-port (in and out) hardware "slug" that enforces your network policy no matter what form of misconfiguration lies behind it is a tool I hope more people will avail themselves of.
[1] https://john.kozubik.com/pub/NetworkSlug/tip.html https://john.kozubik.com/pub/NetworkSlug/tip.html
[2] https://john.kozubik.com/pub/NetworkSlug/body.html https://john.kozubik.com/pub/NetworkSlug/body.html
- xoa 3y agoThat's definitely interesting too, but despite the increased risk of more power, what I'd like would be more complex then that. I want clients that were made long before the noise protocol framework even existed to still be able to get all traffic forced into a virtual network over it, which means effectively to dispense with layer 2 entirely as something for more then physical bit moving and move all traffic and traffic management/auth into L3 or higher. That's certainly becoming more cheaply possible on a technical level with modern SBCs, but I don't know of any really elegant turnkey product yet. Feels like one of those situations where you can see a lot of pieces of the puzzle scattered about but not quite pieced together. Would you still call that a "network slug"? Might be a decent name regardless, but the description there sounds much, much simpler and more focused on layer 2.