afeiszli

9 ms·

31.
by afeiszli 5y ago
Currently just Linux machines can be egress nodes.
32.
by afeiszli 5y ago
A good portion of people are all-in on deploying everything to a single cloud. We're not really targeting those people/orgs. But there's also a large number of people who, for whatever reason, need to deploy stuff in multiple
33.
by afeiszli 5y ago
Tailscale uses userspace WireGuard as opposed to kernel. This on it's own can be up to ~50% slower. They also will frequently fall back to public relays, which depending on distance can add on substantial additional latency.
34.
by afeiszli 5y ago
1. Our system is only compatible with Windows XP so I don't think this is relevant. 2. USB's aren't a viable long-term strategy. With supply chain issues they are likely to cost $3000/gb this year. 3. This is actually an
35.
by afeiszli 5y ago
I've commented on a few of these elsewhere in the thread. Each one has a couple differences like self-hostable, having a GUI, various configuration options, but the main thing I'd like to add is how we're moving the project f
36.
by afeiszli 5y ago
I don't think we have one specifically for a setup like that, but we have lots of tutorials here: https://gravitl.com/resources
37.
by afeiszli 5y ago
Very true. I could see WireGuard turning into something at the level of Kubernetes, where there is a gigantic ecosystem built around that core piece of technology, which everyone needs to support.
38.
by afeiszli 5y ago
I think until we get more users requesting this, it will probably stick on the back burner for some time. We've designed several server components assuming it's deployed on Linux, and it's streamlined for containers. However,
39.
by afeiszli 5y ago
Mainly we give a lot more configuration options as well as a GUI. I'm also not sure if they run on anything other than Linux (I think not?). We can run on Mac, FreeBSD, and Windows. If you're just looking to create a pure mesh net
40.
by afeiszli 5y ago
Nahh you're right, that's not a fair criticism at all, and we rely on tons of community-driven stuff. I only meant that as a differentiator because to some companies, they need to know there's a company behind the project for
41.
by afeiszli 5y ago
Right now you need to choose your own option. We're planning to automate this in the next couple of months. I will say, this isn't always a bad thing. We have a lot of users who switched from Tailscale because it was frequently fa
42.
by afeiszli 5y ago
Totally fair. You've convinced us to put that into our next release. While that's a big flaw it's a simple fix, and it should be in the code base by the end of the week.
43.
by afeiszli 5y ago
gravit-all
44.
by afeiszli 5y ago
You're right, and that's definitely a concern for a lot of users. The idea is you should be able to set any WireGuard configuration file setting from the server, including PostUp and PostDown, which are just arbitrary commands. Ho
45.
by afeiszli 5y ago
Main differences are: #1 Speed #2 It's self-hostable
46.
by afeiszli 5y ago
Oh dang, Greenville is great too.
47.
by afeiszli 5y ago
Agreed entirely. I used to work in the "hybrid cloud" space, and networking was always conspicuously absent from solutions that are supposed to be cross-cloud. I view it as the missing link in a lot of hybrid/multi/edge
48.
by afeiszli 5y ago
That's a very fair point. I'll note again that I'm not a lawyer, but our intention is definitely not to limit those sorts of use cases. If it does, we need to make some changes. I'm going to make sure we figure out a cle
49.
by afeiszli 5y ago
Thanks! Asheville FTW. I think I can guess who you are, in which case, I hope all is well!
50.
by afeiszli 5y ago
we've actually already got OAuth support in the community version for Google, Azure, and GitHub. The enterprise version may add some extra features, though we haven't determined all of what that will be yet.
51.
by afeiszli 5y ago
Let us know how it goes!
52.
by afeiszli 5y ago
Thanks! That does miss one other key difference, which is that you can self-host our server. Also, we won't route your traffic through our relays, which can make stuff quite a bit slower.
53.
by afeiszli 5y ago
Apologies, didn't mean for that to be misleading. Still, he got it into the kernel in record-time for a new feature, which has got to be saying something.
54.
by afeiszli 5y ago
Sounds good, let us know how it goes! And be sure to do a speed comparison too :)
55.
by afeiszli 5y ago
For your points: a) We handle host discovery via the Netmaker server b) We do NAT hole punching with our own implementation on the server c) Yup, we do this too d) No ACL's yet, but this is coming in the Enterprise version e-f) We don&
56.
by afeiszli 5y ago
It is way, way faster than Zerotier. Headscale I am less familiar with, and they do make Tailscale self-hostable, but they're a community-driven project I'm not sure how reliable it'll be long term (can't speak for the a
57.
by afeiszli 5y ago
I am not a lawyer, but the only point of the SSPL at this stage is to prevent direct competition from companies who would just take the project and sell it as their own. It's the same license used by MongoDB. That said, it's on us
58.
by afeiszli 5y ago
I think you'll be happy with the Enterprise version based on your list, we've had very similar thoughts. One question on the final point, where do you see the need to install the server on Windows? We've had one other user as
59.
by afeiszli 5y ago
Thanks, and cheers from the Blue Ridge Mountains. I'll save you some white duck tacos.
60.
by afeiszli 5y ago
Glad to hear it, let us know your thoughts!

More ›