samvrlewis / meshboi Goto Github PK

Some Mesh VPN tools I've used (VPNCloud & Nebula) support the capability to build the "mesh"
across multiple Server Nodes (local, cloud or hybrid).

They also support "routing" a Mesh Node's subnets across the Mesh.
Does Meshboi support that capability?

This is particularly useful for Server Nodes that "host" Containers (Docker & LXD in my Use-Case). Containers
on any "Host/Server" run on non-routeable 10.x.x.x subnets.

So having any particular Server/Host configured as part of a Mesh VPN keeps the overall Mesh Config simple by
not also having to configure each and every Container.

thanks
Brian

I tested your mesh VPN on Oracle Cloud Free Tier using Oracle Linux 8

i got this error:
FATA Serious error reading from tun device: read /dev/net/tun: not pollable

i read that using unix.Open instead of os.OpenFile and setting the fd to NonBlocking seems to solve the problem

Can you fix ?
please

meshboi currently has some logic to ensure that the peer's firewall is open for inbound connection from other meshboi peers:

However, there currently is no mechanism to ensure that the firewall is kept open for the duration of the connection between the peers. This leads to firewall/s timing out the opened port and the connection between two peers dropping, if there is no traffic between the peers (for ufw this seems to happen after ~10mins or so).

Similar to the heartbeat that is sent to the rolodex, to ensure the NAT mapping stays open