Stories
Slash Boxes
Comments

SoylentNews is people

posted by chromas on Sunday December 15 2019, @11:11AM   Printer-friendly
from the I-didn't-see-what-you-did-there dept.

Nebula VPN routes between hosts privately, flexibly, and efficiently

Last month, the engineering department at Slack—an instant messaging platform commonly used for community and small business organization—released a new distributed VPN mesh tool called Nebula. Nebula is free and open source software, available under the MIT license.

It's difficult to coherently explain Nebula in a nutshell. According to the people on Slack's engineering team, they asked themselves "what is the easiest way to securely connect tens of thousands of computers, hosted at multiple cloud service providers in dozens of locations around the globe?" And (developing) Nebula was the best answer they had. It's a portable, scalable overlay networking tool that runs on most major platforms, including Linux, MacOS, and Windows, with some mobile device support planned for the near future.

Nebula-transmitted data is fully encrypted using the Noise protocol framework, which is also used in modern, highly security-focused projects such as Signal and WireGuard. Unlike more traditional VPN technologies—including WireGuard—Nebula automatically and dynamically discovers available routes between nodes and sends traffic down the most efficient path between any two nodes rather than forcing everything through a central distribution point.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Monday December 16 2019, @01:32AM

    by Anonymous Coward on Monday December 16 2019, @01:32AM (#932601)

    This is tinc with presumably better performance-- a *private* overlay mesh network-- no matter where they are, all your participating machines are available, as if on a private local network-- even when behind NAT. If *you* copy child porn between machines in *your private mesh*, then yeah, child porn will traverse *your* overlay network.

    If this really does have decent perf, I'm looking forward to trying it out. Tinc is awesome, but slower than molasses.