flannel VS wireguard-windows

$ kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml

--pod-network=10.244.0.0/16: This is the default CIDR for flannel, and also avoids a conflict with my internal network if calico is used (which is the plan)

The installation of K8s id done by kubeadm. In this installation Containerd is used as CRI and flannel is used as CNI.

K8s is installed through kubeadm ad uses Containerd as CRI and Flannel as CNI. You can also install longhorn for the persistent storage and nginx ingress controller for the ingress rules.

This terraform module will deploy a high available Kubernetes (K8s) cluster on Amazon AWS, using mixed on-demand and spot instances. K8s is installed through kubeadm ad usesContainerd as CRI and Flannel as CNI. You can also install longhorn for the persistent storage and nginx ingress controller for the ingress rules. Please note, this is only an example on how to Deploy a Kubernetes cluster. For a production environment you should use EKS or ECS.

I have Ubuntu 20.x and 21.x installed in my cluster, mostly because I am familiar with Ubuntu and figured the latest LTS versions would be a good idea to use for docker swarm and now kubernetes.... But there is a kernel bug, (k3s issue link and flannel issue link) with VXLAN that makes the default flannel container networking interface not work..... So I decided to Calico as the CNI to experiment with it, but I have been running to issues with BIRD is not ready: errors on only 2 of my nodes..... Which is an improvement then all of my nodes having the error like a couple of days ago.... but it is frustrating that only 2 have the error....

Flannel cni has a special requirement - it needs the k8s cluster to have a preassigned CIDR (see here). IDK how to do that in a live cluster, as I had run kubeadm reset a few times already and I saw no reason not to recreate my cluster one again. And so I did. And while I was recreating the cluster, I also had a great opportunity to specify the IP address I wanted the k8s API to be accessible through.

Now download Wireguard -https://www.wireguard.com/install/ for the computer to want to use to vpn into your network.

Although unsupported it's also possible to use the official WireGuard app to connect to Nord. With your Linux machine you can retrieve the required information from an active NordLynx connection. The basic steps are outlined in that same thread:

Sure. Please have a look at this PR https://github.com/WireGuard/wireguard-windows/pull/18

Indeed, Wireguard is a secure tunneling protocol that you may freely use. It's quite easy to set up a tunnel between your WM2 and another computer.

Maybe we should warn the guys developing WireGuard, because if you install one of their clients from here: https://www.wireguard.com/install/ they are using the Interface Private Key created for that specific client at the other side ;)

I think setting the LimitedOperatorUI registry key covers this functionality in the official client already?

use a vpn/WireGuard 4 on mobile device 5 to connect to home and get ad blocking and browsing privacy on the go