Conversation

Notices

1. Embed this notice
   翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Wednesday, 10-Jul-2024 16:56:12 JST 翠星石

   in reply to

   • GNU/r000t
   @r000t >Not using wireguard for tunnels
   • Embed this notice
     GNU/r000t (r000t@ligma.pro)'s status on Wednesday, 10-Jul-2024 16:56:13 JST GNU/r000t

     >openvpn too fucking slow
     >the performance tuning that worked years ago isn't working anymore
     >say fuck it and deploy tailscale with a foss control plane
     >works really well
     >does failover and mesh networking
     >go to configure routed subnets for site-to-site VPN
     >it acts strangely
     >tailscale on freebsd doesn't support disabling SNAT across routed subnets
     >all my shit's pfsense

     So I either need a Linux alternative to pfSense or every site will need a sidecar VM *just* running tailscale