-rw-r--r--1.2KApr 25
›Building a WireGuard Mesh for My Homelab
I replaced a hub-and-spoke OpenVPN setup with a full mesh of WireGuard peers. Latency dropped, complexity dropped, and I finally understand why everyone moved.
I replaced a hub-and-spoke OpenVPN setup with a full mesh of WireGuard peers. Latency dropped, complexity dropped, and I finally understand why everyone moved.
WireGuard is ~4000 lines of code. OpenVPN is ~70,000. The performance and security gap exists for a reason. A look under the hood.
`docker run` looks like magic. Pull back the curtain and it's mostly `ip netns add` plus a virtual ethernet pair. Let's build it from scratch.