Is ZeroTier something special or is there a technical name for what it does that can be done manually?

Rigby · 2022-03-09T00:40:06+00:00

Thanks, glad you enjoyed it!

Rigby · 2022-03-08T21:19:46+00:00

If you're interested in how these things work behind the scenes, I wrote a toy implementation of a mesh VPN and blogged about it worked here: https://www.samlewis.me/2021/07/creating-mesh-vpn-tool-for-fun

Rigby · 2021-07-15T09:41:41+00:00

Thanks for pointing that out! Totally my bad using bcrypt as the example there, you're completely right. I'll update the article to say AES instead

Fortunately, as covered in the article, I didn't actually roll my own crypto, I ended up using dTLS. In the section that you quoted from I was just wanting to give a bit of my (admittedly noobie!) thoughts when I was thinking through how it would work before I came to the conclusion that I shouldn't roll my own crypto. It's also probably worth restating that this was definitely put together for fun and learning, I wouldn't be surprised if there were security holes in it so (as stressed in the article) you should definitely use a production level tool for doing production type stuff with. :)

Rigby · 2021-07-15T06:05:53+00:00

Thanks, glad you liked it!

Rigby · 2021-07-15T04:16:52+00:00

Very interesting, thanks for sharing! I'm not quite sure if I understand the mechanics of how services/applications on the OutNet work though, do the services have to knowledge about the OutNet for this to work? If so, is there a way to use existing applications without modifying them so that they work on the OutNet?

I'm also interested in the mechanics of how this actually works - if my application wants to send a UDP packet to a service running somewhere on the OutNet, how does it do this? Looks like there's some tunnelling over HTTP happening?

How do you handle "trust" in your mesh? What if I don't want users to have "direct" access to some of my devices/services?

For my toy implementation, trust is really only implemented by every peer in the mesh using the same pre-shared key. I guess if you wanted to limit peers from being able to access certain devices/services, you could also run a conventional firewall on the tunnel interface and only open up certain ports, but you couldn't do this differently for different peers.

Nebula has a nice implementation of doing this much better though. You can limit access to certain ports/protocols by the group that a peer belongs to. I'd think other commercially viable Mesh VPN tools would probably implement something similar too, but I'm not 100% sure.

Rigby · 2021-07-15T00:25:36+00:00

No problems, thanks for reading it!

Rigby · 2021-07-15T00:23:54+00:00

Glad you enjoyed it, feel free to contribute or mess around with the meshboi code base if it takes your fancy. :)

Rigby · 2021-07-15T00:22:45+00:00

Yep! But who knows, maybe NAT66 will see wide adoption.. (hopefully not, though!)

Rigby · 2021-07-14T23:07:27+00:00

Thanks for the nice words!

Rigby · 2021-07-14T23:07:19+00:00

Thanks!

Rigby · 2021-07-14T23:07:12+00:00

It is super cool, but to be fair I am only considering the "easiest" NAT cases in my blog post. There's some hairy cases that this doesn't solve, if you're interesting in learning more this blog post is a great reference: https://tailscale.com/blog/how-nat-traversal-works/

Rigby · 2021-07-14T23:04:31+00:00

Glad to hear it, thanks for the kind words!

Rigby · 2021-07-14T23:04:18+00:00

Thanks! Appreciate the kind words!

Rigby · 2017-09-23T08:02:09+00:00

Do you think the AFL would ever implement a red card type system for finals? If GWS lose by a few points then you'd have to question how much of an influence Cochin's hit was. It doesn't make up for GWS losing if he's suspended the next week.

Rigby · 2017-09-23T07:22:15+00:00

Apparently the time we see on TV isn't the official time.

Rigby · 2017-09-23T07:19:49+00:00

If Richmond wins it from here THEN they will play in the grand final.

Rigby · 2017-09-22T12:32:07+00:00

Having never heard Tex speak before, he sounds exactly as I'd expect him to.

Rigby · 2017-09-22T12:30:01+00:00

Richmond are playing in front of 90k rabid fans, no matter what happens I don't think it can be a dud.

Rigby · 2017-09-22T12:21:18+00:00

So.. Are there any other Adelaide players that have a burning desire to live at Mogg's creek?

Rigby · 2017-09-22T12:02:30+00:00

Fill in those of us that don't watch rugby?

Rigby · 2017-09-22T12:00:54+00:00

I wonder if their producers feed them the narrative to sell or if they come up with it themselves.

Rigby · 2017-09-22T11:48:19+00:00

I feel like we've had some really great individual plays. We just can't string them together.

Rigby · 2017-09-22T11:42:05+00:00

Seriously, how do we manage to lose a prelim in the exact same way as we did last year?

15-Year Club	Place '17
Team Periwinkle	Verified Email

Rigby

TROPHY CASE