• Zachariah@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    5 days ago

    Great resource for understanding how it fits in:

    https://lucioduran.com/blog/wireguard-mesh-networking-tailscale-internals

    edit: yeah, visited the homepage for that link and it’s not great

    • eleijeep@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 days ago

      That’s it. No certificates, no certificate authorities, no HMAC negotiation. Just Curve25519 key pairs and ChaCha20-Poly1305 encryption.

      Surely an actual human has written an article like this that you could share instead.

      I enjoyed this blog post about how Tailscale does NAT traversal, which covers the second half of your linked article: https://tailscale.com/blog/how-nat-traversal-works

      • Zachariah@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        5 days ago

        Thanks, I appreciate the additional info. I just use Wireguard myself, and handle everything else manually, so I’ve been reading all about head/tail-scale.