Linux

15082 readers

666 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Decentralized VPN with hole punching?(Tailscale with decentralized control server) (realbitcoin.cash)

submitted 2 days ago by farooqkz@realbitcoin.cash to c/linux@programming.dev

10 comments fedilink hide all child comments

Hey. I'm currently using Tailscale with a self hosted control server(headscale). The problem's that when the control server goes down for several days(Internet outage, here, in Iran), the clients get lost. And I have to come up with a new control server.

So I'm looking for a solution similar to Tailscale+Headscale, but with decentralized control server and relay.

Note that raw wireguard is not a solution. As some clients are(or might be) behind NATs. And then they will either need hole punching or a relay.

you are viewing a single comment's thread
view the rest of the comments

[–] moonpiedumplings@programming.dev 4 points 2 days ago (2 children)

yggdrasil

https://yggdrasil-network.github.io/

[–] farooqkz@realbitcoin.cash 1 points 7 hours ago

It's a new global network built on Internet. right? I guess maybe we could use it during Internet outage, here in Iran, using the internal country network.

[–] possiblylinux127@lemmy.zip 3 points 1 day ago (2 children)

I'm not sure it is censorship resistant

[–] moonpiedumplings@programming.dev 1 points 21 hours ago* (last edited 21 hours ago) (1 children)

It's not, but it doesn't look like they need hardcore censorship resistance if they are able to host and use headscale. It looks like their main problem is internet outages.

I have been in environmenrs where any usage of wireguard is automatically fingerprinted and blocked.

[–] farooqkz@realbitcoin.cash 1 points 6 hours ago

During the Internet outages in Iran, most of the nodes inside the country are still accessible through most ISPs. The advertised self healing of yggdrasil sounds promising.

But just for anyone else's information reading this, we also have censorship on servers inside the country. TLDR, the law has completely vanished in here. You just have to fight, or hide to not get censored or otherwise caught.

[–] Corbin@programming.dev 4 points 1 day ago

What's your threat model? No matter what, hole-punching will require some sort of relay. Yggdrasil's likelier than Iroh to have available community servers if you need a hole punched in an adversarial context.