Re:NetMaker: Connect Everything with a WireGuard VPN
by yardstick on Wednesday August 16, 2023 @02:03AM
(#37143378)
What’s your approach to routing the mesh? Static? BGP? Something else?
Re:NetMaker: Connect Everything with a WireGuard VPN
by GhostWhisperer on Wednesday August 16, 2023 @02:10AM
(#37143406)
i don't route any traffic besides the odd exit-node, and tailscale takes care of that for me
the exit-node routing is for firewall circumvention - if i find myself unable to connect to git over ssh, i simply activate routing through the exit-node and continue working
the exit-node sits at home where i set the rules
Re:NetMaker: Connect Everything with a WireGuard VPN
by ignoramous on Wednesday August 16, 2023 @06:20AM
(#37144989)
> - speed: netmaker is faster because it uses kernel wg - this is not going to hold true for all system configurations, certainly doesn't for macos
As of now, tailscale claims they're faster than (linux) kernel wg: https://tailscale.com/blog/throughput-improvements/
Surprisingly, we improved the performance of wireguard-go (running in userspace) enough to make it faster than WireGuard (running in the kernel) in the best conditions. But, this point of comparison likely won’t be long-lived: we expect the kernel can do similar things.
Re:NetMaker: Connect Everything with a WireGuard VPN
by SOLAR_FIELDS on Wednesday August 16, 2023 @09:52AM
(#37147009)
Huh, would be interesting to see some non-tailscale benchmarks of this. Assuming the kernel impl is actually optimized it should be theoretically impossible to exceed the performance with userland wg?
Re:NetMaker: Connect Everything with a WireGuard VPN
by SparkyMcUnicorn on Wednesday August 16, 2023 @09:41PM
(#37156129)
I ran the same benchmarks they listed here[0], and did some practical tests. As of a week after the article being written, Tailscale was faster than kernel wireguard.
2. the comparison:
- protocol: wireguard is now baseline
- speed: netmaker is faster because it uses kernel wg - this is not going to hold true for all system configurations, certainly doesn't for macos
- flexibility: feels like it does the same as tailscale, marketed slightly different as they list common use-cases – egress and ingress gateways; network shaping with acls is also possible in ts; maybe someone will write-up an unbiased comparison on self hosting
- price: ts offer seems to be good enough for most users and their limits are "soft" anyway – i pay $45 a year because i want sustainable, not free
looking for reasons to change and don't find any