16
headscale - An open source, self-hosted implementation of the Tailscale control server (VPN) (github.com)
submitted 2 months ago by [M] to c/librebyte@lemmy.ml
3 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 months ago* (last edited 2 months ago) (2 children)

Great resource for understanding how it fits in:

https://lucioduran.com/blog/wireguard-mesh-networking-tailscale-internals

edit: yeah, visited the homepage for that link and it’s not great

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 2 months ago (1 child)

    That's it. No certificates, no certificate authorities, no HMAC negotiation. Just Curve25519 key pairs and ChaCha20-Poly1305 encryption.

    Surely an actual human has written an article like this that you could share instead.

    I enjoyed this blog post about how Tailscale does NAT traversal, which covers the second half of your linked article: https://tailscale.com/blog/how-nat-traversal-works

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •