News for hackers. Stuff that matters.

A comment on Wiretrustee: WireGuard-Based Mesh Network. Parent comment

Re:Wiretrustee: WireGuard-Based Mesh Network by formerly_proven on Tuesday June 29, 2021 @07:53AM (#27674567)
Considering that the wireguard mesh solutions seem to require static IPs, I'm now wondering whether it might be a good idea to run a wireguard mesh on top of tinc, basically just using tinc as a way to get static IPs and routing connectivity between nodes. That still leaves the issue of updating the wireguard configuration, though.
[ Parent | on HN ]
Re:Wiretrustee: WireGuard-Based Mesh Network by JacobiX on Tuesday June 29, 2021 @08:16AM (#27674760)
Not sure about that, I use Tailscale (wireguard based) and none of my devices have a public IP.
[ Parent | on HN ]
Re:Wiretrustee: WireGuard-Based Mesh Network by Intermernet on Tuesday June 29, 2021 @09:08AM (#27675260)
It seems that the value-add magic sauce of TailScale is the work they've put into NAT traversal etc. There are some interesting blog posts from the team regarding work in this area.
[ Parent | on HN ]
Re:Wiretrustee: WireGuard-Based Mesh Network by generalizations on Tuesday June 29, 2021 @12:07PM (#27677881)
I wonder if the work they put in can be extracted to some kind of tool the other projects can use as well. NAT traversal always seems like the limiting factor in projects like this.
[ Parent | on HN ]
Re:Wiretrustee: WireGuard-Based Mesh Network by littlestymaar on Tuesday June 29, 2021 @04:39PM (#27681421)
NAT traversal is an impossible problem in practice in the general case (boo symmetric NATs), and the best-effort version is a solved problem since at least 2003 with the STUN protocol[1] which is part of WebRTC, and there are STUN implementations available in many languages[2].

[1]: https://datatracker.ietf.org/doc/html/rfc3489 [2]: For instance, Rust: https://github.com/webrtc-rs/stun & Go:https://github.com/pion/stun, and see this HN comment listing a few WebRTC implementations (which include STUN): https://news.ycombinator.com/item?id=26739253

[ Parent | on HN ]
Re:Wiretrustee: WireGuard-Based Mesh Network by Intermernet on Tuesday June 29, 2021 @08:59PM (#27683725)
Sorry, I meant to add this to my original comment. Link to pertinent blog entry: https://tailscale.com/blog/how-nat-traversal-works/
[ Parent | on HN ]