tinc VS mullvadvpn-app

But both Nebula and tinc max out at around 1 Gbit/s on my Hetzner servers, thus not using most of my 10 Gbit/s connectivity. This is because they cap out at 100% of 1 CPU. The Nebula issue about that was closed due to "inactivity" [2].

I also observed that when Nebula operates at 100% CPU usage, you get lots of package loss. This causes software that expects reasonable timings on ~0.2ms links to fail (e.g. consensus software like Consul, or Ceph). This in turn led to flakiness / intermittent outages.

I had to resolve to move the big data pushing softwares like Ceph outside of the VPN to get 10 Gbit/s speed for those, and to avoid downtimes due to the packet loss.

Such software like Ceph has its own encryption, but I don't trust it, and that mistrust was recently proven right again [3].

So I'm currently looking to move the Ceph into WireGuard.

Summary: For small-data use, tinc and Nebula are fine, but if you start to push real data, they break.

[1]: https://github.com/gsliepen/tinc/issues/218

[2]: https://github.com/slackhq/nebula/issues/637

[3]: https://github.com/google/security-research/security/advisor...

From a purely networking perspective, there are far better solutions than tailscale.

Have a look at full mesh VPNs like:

https://github.com/cjdelisle/cjdns

https://github.com/yggdrasil-network/yggdrasil-go

https://github.com/gsliepen/tinc

https://github.com/costela/wesher

These build actual mesh networks where every node is equal and can serve as a router for other nodes to resolve difficult network topologies (where some nodes might not be connected to the internet, but do have connections to other nodes with an internet connection).

Sending data through multiple routers is also possible. They also deal with nodes disappearing and change routes accordingly.

tailscale (and similar solutions like netbird) still use a bunch of "proxy servers" for that. You can set them up on intermediate nodes, but that have to be dealt with manually (and you get two kinds of nodes).

Two other options are Tinc https://tinc-vpn.org/ or Nebula https://www.defined.net/nebula/

And there is Tinc; the OG overlay network. I don't have experience with this. Seemed a bit of a pain to setup. https://tinc-vpn.org

For what its worth I have used the open source Tinc VPN [1] for mesh multihop routing for ages. It is nowhere near as fast as Wireguard but I could envision Tinc incorporating support for Wireguard if the author were so inclined. Like you mentioned Tinc does not mesh with other VPN's AFAIK.

[1] - https://tinc-vpn.org/

This is actually very simple in concept and is just as simple or even simpler to do with tinc (https://tinc-vpn.org).

Since I can use tinc in bridge mode, I can run tinc on the upstream server and on a local machine which then provides access to several physical machines without running extra software on each of those machines, which is particularly useful for machines that are resource limited, like my Macintosh LC II and LC III+:

http://elsie.zia.io/

It'd be nice if it weren't so difficult to get public addresses.

I clicked expected some broken analogy between https://tinc-vpn.org/ and the Catan board game, but instead it is a Catan implementation. Fair enough.

will generate a real-time network graph using the Graphviz DOT language. It's a cool feature that I find quite useful.

[0] https://tinc-vpn.org/

* Mozilla VPN: wrapper around https://mullvad.net/ (and had security issues: https://www.techradar.com/news/security-audit-finds-major-is...)

hey there, after doing some research it seems like the conclusion is your vpn. Nord VPN has a lack of port forwarding, while other vpns have port forwarding (proton, mullvad). that is most likely interrupting your speed. also, apparently nord does keep some sort of logs if your interested in that. i would recommend cancelling nord and getting something else like proton or mullvad (i would recommend proton more) if you really want to download movies/shows. another option for you (if you dont want to switch) is to find your movie on websites that don't require a vpn (aka not torrenting) but you can if you want to. you can use this for that, they have tons of movies and shows. or just use a streaming site off of the megathread.

The 500 MiB thing is because the frontend is an Electron app. That's sadly how it is with Electron. The UI can of course be re-written into a language/framework that produces way smaller programs, but it's not currently really worth the tradeoff. Most people are not that constrained in disk or internet speeds. https://github.com/mullvad/mullvadvpn-app/issues/1572

The downloads folder access thing is because Apple made it so. If you run an installer from the downloads folder it will need access to the downloads folder. This has nothing to do with Mullvad, but is a permission check macOS puts on all software. The Mullvad VPN app has no code for doing anything in the Downloads folder specifically.

Requiring an account for search is a deal breaker. They say they need it for payment, but mullvad[0] does just fine without an account as well.

[0]: https://mullvad.net/

From this post: https://github.com/mullvad/mullvadvpn-app/issues/1570

I don't understand why the .rpm package of Mullvad VPN still only officially supports Fedora. This issue on GitHub has been open for almost three years now and there is even someone else trying to help you making the necessary changes to support openSUSE in this PR. I kinda agree with cornfeedhobo's sentiment that the necessary changes to make it work on openSUSE are being gated. I'm a paying user for quite some years already and made the switch to openSUSE and I'd really like to continue using Mullvad VPN there without having to force install the .rpm package and thus living with a lot of uncertainty about how well it will run.

It's just a false-positive. If you're still wary, feel free to review the source code of the app and you can even build it yourself: https://github.com/mullvad/mullvadvpn-app/