Innernet: Open source Rust based Tailscale alternative by Tonari

• tinc

  19 1,837 5.6 C

  a VPN daemon

This is awesome, thanks for sharing!

I really like the simple client/server architecture, that it's easily self-hostable and there are no servers outside of my control.

The invite system reminds me of the way Tinc[1] handles it, which is great. It's so good to see user friendly tooling on top of WireGuard.

[1]: https://tinc-vpn.org/

• trust-dns

  14 3,254 7.1 Rust

  Discontinued A Rust based DNS client, server, and resolver [Moved to: https://github.com/hickory-dns/hickory-dns]

  

You could run a local DNS server using something like https://github.com/bluejekyll/trust-dns . Or, you could install an NSS module to resolve names via the innernet client.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• tailscale

  1,005 16,437 9.9 Go

  The easiest, most secure way to use WireGuard and 2FA.

  

I think tailscale uses a userland TUN/TAP interface[0] which negotiates at 10MiB/s; that’ll be the largest bottleneck and likely applies to Innernet too.

Tailscale does use considerable CPU on my Mac though.

[0]: https://github.com/tailscale/tailscale/blob/main/net/tstun/t...

• ipcalc

  5 - -

I found interactive CIDR visualization tools like https://cidr.xyz/ to be very helpful in understanding the notation.

I also end up using https://gitlab.com/ipcalc/ipcalc a lot, and am definitely planning on similarly making it easier in the terminal to manage and visualize the CIDRs in innernet networks. I'm hoping innernet can become a fun way to learn networking in a safe (and cheap) virtual environment.

• Nebula

  140 13,717 8.6 Go

  A scalable overlay networking tool with a focus on performance, simplicity and security

  

Isn't the tool linked at the bottom, Nebula [1], capable of running without root?

Personally, I'm not surprised in the slightest that messing with networking requires administrative privileges. I don't really understand the use case for rootless nodes or how they're normally managed, but I can see how those are too niche for most networking software to work with.

I've never tried it, but perhaps you van get Innernet to work with the usermode WireGuard client (the one written in Go [2]), that seems to work on Android without any kernel support or root privileges. Innernet is a daemon over the wg command line tool so it might work out of the box?

[1]: https://github.com/slackhq/nebula

• tinc-boot

  1 154 0.0 Go

  Bootstrap your Tinc node quickly and easy

I have been working on wrapper around Tinc to simplify setup. Project: https://github.com/reddec/tinc-boot

Suggest a related project