News for hackers. Stuff that matters.
Re:Meshbird – Distributed private networking by macrael on Monday February 13, 2017 @04:47PM (#13639079)
Does anyone here have any experience with other distributed VPNs?
Re:Meshbird – Distributed private networking by nine_k on Monday February 13, 2017 @09:24PM (#13640683)
ZeroTier: it connects my laptop, my VDS, and my behind-two-NATs home machine pretty efficiently. That is, e.g., when my laptop is connected to the home wi-fi, the zerotier interface seems to exchange packets directly with the home machine.

Presence of an Android client is important for me. Auto-reconfiguation in a new network (laptop on a public wi-fi, phone on mobile networks) is nice.

"Peer-to-peer discovery" is not important for me, that is, I'm OK with my nodes discovering the network via a control center. (You can self-host the control center.)

Re:Meshbird – Distributed private networking by wizeman on Monday February 13, 2017 @08:14PM (#13640407)
cjdns works for me and seems quite secure as a private, distributed VPN. It automatically assigns an unforgeable IPv6 address to each node:

https://github.com/cjdelisle/cjdns

Re:Meshbird – Distributed private networking by Wicher on Monday February 13, 2017 @05:33PM (#13639437)
Tinc (http://www.tinc-vpn.org) works well for me and can do meshing.
Re:Meshbird – Distributed private networking by stevekemp on Tuesday February 14, 2017 @05:58AM (#13642637)
gvpe is similar to tinc, and I wrote up a small piece about using it on Debian here:

https://debian-administration.org/article/695/Joining_dispar...

Re:Meshbird – Distributed private networking by rebase on Monday February 13, 2017 @05:11PM (#13639267)
Check out wireguard: https://www.wireguard.io/
Re:Meshbird – Distributed private networking by api on Monday February 13, 2017 @05:19PM (#13639314)
Wireguard supports roaming but it's not distributed in a p2p global sense.
Re:Meshbird – Distributed private networking by rebase on Monday February 13, 2017 @05:29PM (#13639417)
True. tinc: https://www.tinc-vpn.org/ is another option for distributed VPN

But if you're ok with discovery going through master/server and then connecting directly to peers for traffic, I'd stick with Wireguard.

Re:Meshbird – Distributed private networking by mirimir on Monday February 13, 2017 @05:30PM (#13639421)
PeerVPN – Open-source peer-to-peer VPN

https://news.ycombinator.com/item?id=9025792

Re:Meshbird – Distributed private networking by rcarmo on Monday February 13, 2017 @06:55PM (#13640030)
I used to use n2n:

https://github.com/meyerd/n2n

Haven't found anything else quite like it.

Re:Meshbird – Distributed private networking by gwu78 on Tuesday February 14, 2017 @02:04AM (#13641794)
Why did you stop using it?
Re:Meshbird – Distributed private networking by rcarmo on Tuesday February 14, 2017 @03:19AM (#13642091)
Well, it seems to be stalled, for starters.

Running a VPN between only 4 machines wasn't that useful, and it needs a central server. I quite like Meshbird's idea of using DHT instead. If it ever evolves to improve its crypto and setup, I might take it up instead.

Re:Meshbird – Distributed private networking by gwu78 on Tuesday February 14, 2017 @12:14PM (#13645118)
".. it needs a central server."

There is a PDF by the original author that explains the difference from "VPNs".

A reachable IP address and a TAP device are the only requirements.

For example, two edges can also be supernodes. A third party supernode would only be needed for the initial connection. Once connected, then each can use the supernode run by the other. The third party is no longer needed. No central server.

As for DHT, who runs the DHT bootstrap server?

Do DHT users run their own bootstrap servers?

Do users exercise any control over the DHT? Who does?

Re:Meshbird – Distributed private networking by rcarmo on Tuesday February 14, 2017 @05:40PM (#13647960)
By central server I mean a referral hub, yes. But I just couldn't keep one up reliably (in the sense that I didn't want to, since the mesh had to be fairly dynamic in my case).
Re:Meshbird – Distributed private networking by fulafel on Tuesday February 14, 2017 @12:08AM (#13641302)
The IPsec stack that comes your OS probably supports host-to-host mesh when suitably configured.
Re:Meshbird – Distributed private networking by NetStrikeForce on Tuesday February 14, 2017 @06:36AM (#13642796)
I run Wormhole (hosted "distributed" VPN / Overlay Networking / You name it), which uses SoftEther behind the curtains: https://wormhole.network
Re:Meshbird – Distributed private networking by aiNohY6g on Tuesday February 14, 2017 @12:26AM (#13641379)
Not a VPN and not distributed, but probably worth to mention anyway: Tor hidden service + SSH. Works very well.
Re:Meshbird – Distributed private networking by jlgaddis on Monday February 13, 2017 @10:52PM (#13641006)
I've used DMVPN extensively, but mostly on (Cisco) BFR's.