!vVtVcVdzAdhGFLzFwm:matrix.org

Yggdrasil

473 Members
Experimental end-to-end encrypted IPv6 overlay network — https://yggdrasil-network.github.io — https://github.com/yggdrasil-network/yggdrasil-go — English language only, off-topic → #yggdrasil-community:matrix.org86 Servers

Load older messages


SenderMessageTime
22 Jan 2022
@stuart:gathman.orgstuart6to4 is 6in4 with a prefix convention tied to public IP4 and an anycast gateway of inconsistent performance.22:06:36
@stuart:gathman.orgstuart6to4 was genius - but the inconsistent performance killed it when Windows users joined the party.22:07:56
@mark22k:tchncs.demark22k
In reply to @neilalexander:neilalexander.dev
github.com/neilalexander/yggmail
Thanks!
22:52:23
23 Jan 2022
@airin:matrix.orgMagnolia changed their profile picture.01:04:25
@meff:sunadokei.partymeff joined the room.09:16:34
@horstdieter:matrix.orghorstdieter joined the room.12:52:21
@horstdieter:matrix.orghorstdieterSince the release 0.4 I strongly miss the possibility to tunnel 4in6. The recommendation is to take GRE, ds-lite , ... Is there somewhere a simple instruction to implement this on openwrt? Unfortunately my whole IPv4 world is broken.14:36:17
@cyberuserful:matrix.vsund.de@cyberuserful:matrix.vsund.de left the room.14:36:35
@neilalexander:neilalexander.devneilalexander
In reply to @horstdieter:matrix.org
Since the release 0.4 I strongly miss the possibility to tunnel 4in6. The recommendation is to take GRE, ds-lite , ... Is there somewhere a simple instruction to implement this on openwrt? Unfortunately my whole IPv4 world is broken.
Just set up GRE in the same way as you would anywhere else, but the local and remotes of the tunnel are Yggdrasil IPv6 addresses. Then route IPv4 over the GRE tunnel
14:38:04
@horstdieter:matrix.orghorstdieterThanks, gre6 or gre6tap as base? 14:39:58
@stuart:gathman.orgstuarttap devices are for layer2 tunnels (ethernet packets, carry ip4, ip6, 4in6, 6in4, experimental, etc). You probably want a tunnel that routes ip4.14:45:15
@stuart:gathman.orgstuartGRE is a great solution - no need to build tunneling into other protocols.14:45:54
@mkb2191:matrix.orgmkb2191is gre better than wireguard?14:46:56
@jgoerzen:complete.orgjgoerzenDifferent. gre isn't inherently encrypted.14:47:59
@jgoerzen:complete.orgjgoerzenpersonally if it were me, I'd just go for Wireguard14:48:19
@horstdieter:matrix.orghorstdieterSorry for this question, but if I would have an end2end crypted traffic (ygg), why I schould use an crypted VPN on top? 14:50:58
@horstdieter:matrix.orghorstdieter * Sorry for this question, but if I would have an end2end crypted traffic (ygg), why I should use an crypted VPN on top? 14:51:59
@horstdieter:matrix.orghorstdieter * Sorry for this question, but if I would have an end2end crypted traffic (ygg), why I should use an encrypted VPN on top? 14:52:10
@jgoerzen:complete.orgjgoerzenPersonally for me, it would be defense in depth. And also that Wireguard is more suited to a variety of network conditions than GRE is. Having said that, though, Yggdrasil's very large MTU means that it is less likely to run into MTU problems than regular GRE is, which have been my biggest complaint about GRE in general.14:54:46
@deavmi:matrix.orgTristan B. KildaireIf you wanna run an IP tunnel over Yggdraisl then I'd recommend GRE over Wireguard for speed and simplicity15:53:53
@deavmi:matrix.orgTristan B. Kildaire * If you wanna run an IP tunnel over Yggdrasil then I'd recommend GRE over Wireguard for speed and simplicity15:53:58
@neilalexander:neilalexander.devneilalexander
In reply to @horstdieter:matrix.org
Sorry for this question, but if I would have an end2end crypted traffic (ygg), why I should use an encrypted VPN on top?
If you are running only over Ygg, then there's no need for the second level of encryption and therefore GRE would be sufficient (and faster) than Wireguard
15:55:13
@neilalexander:neilalexander.devneilalexander
In reply to @jgoerzen:complete.org
Personally for me, it would be defense in depth. And also that Wireguard is more suited to a variety of network conditions than GRE is. Having said that, though, Yggdrasil's very large MTU means that it is less likely to run into MTU problems than regular GRE is, which have been my biggest complaint about GRE in general.
Well, it’s only really a problem if you want to bridge/forward to/from GRE and another network, in which case you need the tunnel MTU to match the upstream links. Over Ygg that is easy because we have huge MTUs that can account for more than the GRE overhead, so a 1500 MTU GRE tunnel is possible and easy to do
15:57:49
@andsla:matrix.org@andsla:matrix.org left the room.16:24:18
@m5zs7k:libera.chatm5zs7k joined the room.22:09:00
24 Jan 2022
@ishikawa:tchncs.decerebral_flex changed their profile picture.01:45:30
@ishikawa:tchncs.decerebral_flex changed their display name from ishikawa to cerebral_flex.01:46:31
@frostedforge:matrix.org@frostedforge:matrix.org joined the room.02:43:21
@frostedforge:matrix.org@frostedforge:matrix.org left the room.02:49:59
@blm:matrix.orgblm joined the room.07:07:52

There are no newer messages yet.


Back to Room List