3 ms·
I do something similar. I run a nebula network. The vps has haproxy and is passing the encrypted data to the hosts using sni to figure out the specific host. No
by dismalpedigree 1y ago
I do something similar. I run a nebula network. The vps has haproxy and is passing the encrypted data to the hosts using sni to figure out the specific host. No keys on the vps.
The vps and each host are each nebula nodes. I can put the nodes wherever i want. Some are on an additional vps, some are running on proxmox locally. I even have one application running as a geo-isolated and redundant application on a small computer at my friend’s house in another state.
- remram 1y agoThis Nebula? https://github.com/slackhq/nebula https://github.com/slackhq/nebula
- dismalpedigree 1y agoYes. Thats the one. Works really well. Basically a free version of tailscale. A bit more of a learning curve.
- duskwuff 1y agoHeadscale [1] has a stronger claim to "free version of Tailscale" - it's literally a self-hosted version of Tailscale's coordination server. It's even compatible with the Tailscale client. [1]: https://headscale.net/ https://headscale.net/
- remram 1y agoThe problem with Headscale is that it has absolutely no documentation. All of it is described in relation to Tailscale, which is what I don't want to use. Here are the Tailscale features we have, here are the differences with Tailscale. It's very weird.
- lostmsu 1y agoI switched from Nebula to Yggdrasil (IPv6, global, but not the same as public IPv6). https://news.ycombinator.com/item?id=43967082 https://news.ycombinator.com/item?id=43967082