Ezinsukwini ezimbalwa ezedlule sixoxe lapha kubhulogi mayelana ne-Firezone, okuyindlela enhle kakhulu yokudala amaseva e-VPN asekelwe ku-WireGuard.
Futhi manje, kulesi senzakalo, sizokhuluma ngosizo olufanayo kakhulu olubizwa ngokuthi "i-Headscale," okuyiphrojekthi ethuthukiswe njengokusetshenziswa komthombo ovulekile kwengxenye yeseva ye -Tailscale VPN , ekuvumela ukuthi udale ama-VPN afana ne-Tailscale endaweni yakho, ngaphandle kokuxhunyaniswa nezinsizakalo zezinkampani zangaphandle.
I-Tailscale ivumela ukuhlanganisa inani elingahleliwe lama-host ahlakazekile ngokwendawo kunethiwekhi , eyakhelwe esithombeni senethiwekhi ene-mesh, lapho i-node ngayinye ixhumana khona namanye ama-node ngqo (i-P2P) noma ngama-node angomakhelwane, ngaphandle kokudlulisa ithrafikhi ngamaseva angaphandle aphakathi omhlinzeki we-VPN.
Ngaphezu kokusekela umzila nokulawula ukufinyelela okusekelwe ku-ACL , kanye nokuvumela ukusungulwa kweziteshi zokuxhumana ngaphansi kwezimo zokusetshenziswa kwe-Network Address Translation (NAT), uhlelo lusekela izindlela ze-STUN, ICE, kanye ne-DERP (ezifana ne-TURN, kodwa ezisekelwe ku-HTTPS). Uma isiteshi sokuxhumana phakathi kwama-node athile sivinjiwe, inethiwekhi ingadlulisela ithrafikhi kwezinye ama-node.
I-Tailscale ihlukile kuphrojekthi ye-Nebula , eklanyelwe futhi ukudala amanethiwekhi e-VPN asatshalaliswa nge-mesh routing, kusetshenziswa iphrothokholi ye-Wireguard ukuhlela ukudluliswa kwedatha phakathi kwama-node, kuyilapho i-Nebula isebenzisa ukuthuthukiswa okuvela kuphrojekthi ye-Tinc, esebenzisa i-algorithm ye-AES-256 ukubethela amaphakethe e-GSM (i-Wireguard isebenzisa ukubethela kwe-ChaCha20, okubonisa ukusebenza okuphezulu kanye nokuphendula okuphezulu ekuhlolweni).
Enye iphrojekthi efanayo, i-Innernet, ithuthukiswa ngokwehlukana, lapho iphrothokholi ye-Wireguard isetshenziswa khona ukushintshanisa idatha phakathi kwama-node. Ngokungafani ne-Tailscale ne-Nebula, i-Innernet isebenzisa uhlelo oluhlukile lokuhlukanisa ukufinyelela olusekelwe kuma-ACL; amalebula awaxhunyanisiwe kuma-node ngamanye nama-subnet ukuze ahlukanise futhi ahlukanise ububanzi obuhlukene bekheli le-IP, njengakumanethiwekhi e-inthanethi avamile.
Futhi, i-Innernet isebenzisa iRust esikhundleni seGo futhi kufanelekile ukuthi sisho ukuthi i-Innernet 1.5 enokuxhaswa okuthuthukile kwe-NAT kudedelwe ezinsukwini ezimbalwa ezedlule. Kukhona nephrojekthi yeNetmaker, ekuvumela ukuthi uxhume amanethiwekhi anezindlela ezahlukahlukene usebenzisa i-Wireguard, kepha ikhodi yayo inikezwa ngaphansi kwe-SSPL (Server Side Public License), engavuleki ngenxa yokuba khona kwezidingo zobandlululo.
I-Tailscale isatshalaliswa kusetshenziswa imodeli ye-freemium, enikeza ukufinyelela kwamahhala kubantu ngabanye kanye nokufinyelela okukhokhelwayo kwamabhizinisi namaqembu. Izingxenye zeklayenti le-Tailscale, ngaphandle kwezinhlelo zokusebenza zesithombe ze-Windows kanye ne-macOS, zakhiwa njengamaphrojekthi omthombo ovulekile ngaphansi kwelayisensi ye-BSD.
Isofthiwe yeseva ye-Tailscale enikezwe ngaphandle, eqinisekisa amaklayenti amasha , iqondisa ukuphathwa kwezihluthulelo , futhi ihlele ukuxhumana phakathi kwama-node, iyimfihlo. Iphrojekthi ye-Headscale ibhekana nale nkinga futhi inikeza ukuqaliswa komthombo ovulekile ngaphandle kwezingxenye zeseva ye-Tailscale.
I-Headscale ithatha imisebenzi yokushintshana kwezihluthulelo zomphakathi phakathi kwama-node futhi yenza nemisebenzi yokwabiwa kwekheli le-IP kanye nokusatshalaliswa kwetafula lokuqondisa phakathi kwama-node.
Ngendlela yayo yamanje, i-Headscale isebenzisa zonke izici eziyinhloko zeseva yokuphatha, ngaphandle kokusekelwa kwe-MagicDNS kanye ne-Smart DNS. Ngokukhethekile, isekela ukubhalisa ama-node (kufaka phakathi ngewebhu), ukuguqula inethiwekhi ukuze ingeze noma isuse ama-node, ukufaka ama-subnets kusetshenziswa izikhala zamagama (okuvumela ukudalwa kwe-VPN yabasebenzisi abaningi), ukuhlela ukufinyelela kwama-node okwabelwana ngawo kuma-subnets ezindaweni zamagama ezahlukene, ukulawula umzila (kufaka phakathi ukwabela ama-node aphumayo ukuze afinyelele umhlaba wangaphandle), ukufinyelela okwabelwana ngawo ngama-ACL, kanye nokusebenza kwe-DNS.
Ikhodi ye-Headscale ibhalwe ku-Go futhi isatshalaliswa ngaphansi kwelayisense le-BSD. Le phrojekthi yathuthukiswa nguJuan Font we-European Space Agency.
Okokugcina, uma unesithakazelo sokufunda okwengeziwe, ungathola imininingwane kusixhumanisi esilandelayo.