Linux

15106 readers

429 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Decentralized VPN with hole punching?(Tailscale with decentralized control server) (realbitcoin.cash)

submitted 3 days ago by farooqkz@realbitcoin.cash to c/linux@programming.dev

10 comments fedilink hide all child comments

Hey. I'm currently using Tailscale with a self hosted control server(headscale). The problem's that when the control server goes down for several days(Internet outage, here, in Iran), the clients get lost. And I have to come up with a new control server.

So I'm looking for a solution similar to Tailscale+Headscale, but with decentralized control server and relay.

Note that raw wireguard is not a solution. As some clients are(or might be) behind NATs. And then they will either need hole punching or a relay.

top 10 comments

sorted by: hot top controversial new old

[–] possiblylinux127@lemmy.zip 3 points 3 days ago (1 children)

Whenever I heard about Iran my mind immediately goes to Tor. (You can run TCP over it) I'm sure there are better options but Tor is certainly the most robust.

[–] farooqkz@realbitcoin.cash 1 points 1 day ago

Jeez! No Tor when there is an Internet outage :)

[–] altphoto@lemmy.today 2 points 3 days ago (1 children)

I recently started using rayfish:

https://rayfish.xyz/

Its new and very active, but also the dev uses AI. Its hard to tell where it might go but its de-centralized, it doesn't need a control server and simply works device to device.

[–] farooqkz@realbitcoin.cash 1 points 1 day ago

Me stance on AI is neutral for now. Though, for meself, I try to keep away from it for intelligent tasks. However, rayfish looks very promising.

[–] moonpiedumplings@programming.dev 4 points 3 days ago (2 children)

yggdrasil

https://yggdrasil-network.github.io/

[–] farooqkz@realbitcoin.cash 1 points 1 day ago

It's a new global network built on Internet. right? I guess maybe we could use it during Internet outage, here in Iran, using the internal country network.

[–] possiblylinux127@lemmy.zip 3 points 3 days ago (2 children)

I'm not sure it is censorship resistant

[–] Corbin@programming.dev 4 points 3 days ago

What's your threat model? No matter what, hole-punching will require some sort of relay. Yggdrasil's likelier than Iroh to have available community servers if you need a hole punched in an adversarial context.

[–] moonpiedumplings@programming.dev 1 points 2 days ago* (last edited 2 days ago) (1 children)

It's not, but it doesn't look like they need hardcore censorship resistance if they are able to host and use headscale. It looks like their main problem is internet outages.

I have been in environmenrs where any usage of wireguard is automatically fingerprinted and blocked.

[–] farooqkz@realbitcoin.cash 1 points 1 day ago

During the Internet outages in Iran, most of the nodes inside the country are still accessible through most ISPs. The advertised self healing of yggdrasil sounds promising.

But just for anyone else's information reading this, we also have censorship on servers inside the country. TLDR, the law has completely vanished in here. You just have to fight, or hide to not get censored or otherwise caught.