News for hackers. Stuff that matters.
Re:Ask HN: What do you self-host? by emit_time on Saturday October 12, 2019 @11:30PM (#21238177)
Have you considered moving from tinc to Wireguard?
Re:Ask HN: What do you self-host? by mavidser on Saturday October 12, 2019 @11:52PM (#21238248)
Yes, I've been meaning to give it a go for a while now. Couldn't use it initially because of (then) lack of availability on BSD.
Re:Ask HN: What do you self-host? by masterfooo on Saturday October 12, 2019 @11:49PM (#21238241)
I use both, and one thing I found that is sucky about WG is that it does not work well with the Windows firewall. I need to give full permission to an app to be able to access ip addresses routed by WG. Tinc does not have this problem.
Re:Ask HN: What do you self-host? by LinuxBender on Tuesday October 15, 2019 @10:24AM (#21258690)
WG also doesn't do dynamic mesh routing. With tinc, I can have a network path down, and my mesh will find it's way around it. Tinc is slower than WG, but I will take that hit for the benefit of availability. (my preference anyway)

One thing I noticed with tinc is that it does not take advantage of sysctl network tuning. I had to increase the network buffers for that dynamic routing to not make as much of a noticeable slowdown.

    Cipher = aes-128-cbc
    ClampMSS = yes
    UDPRcvBuf = 81920000
    UDPSndBuf = 81920000
    Compression = 0