Hacker Newsnew | past | comments | ask | show | jobs | submit | aaronds's commentslogin

A bit lower level than most things discussed here but on the topic of overlay networks, I’ve used nebula for years and can recommend it

https://github.com/slackhq/nebula


+1 on Nebula. I don’t know why it doesn’t get mentioned more as an overlay network option.

I've used it for some time, it feels very much like it is in maintenance mode.

You manage a PKI and have to distribute the keys yourself, no auth/login etc.

it's much better than wireguard, not requiring O(N) config changes to add a node, and allowing peoxy nodes etc.

iirc key revocation and so on are not easy.


Nebula just had a major release that added IPv6 support for overlay networks. Hardly maintenance mode.

The main company working on it now seems to be adding all the fancy easy-to-use features as a layer on top of Nebula that they are selling. I personally appreciate getting to use the simple core of Nebula as open source. It seems very Unix-y to me: a simple tool that does one thing and does it well.


Nebula does not require O(n) config changes for adding a node.

O(n) is only required for:

- active revocation of a certificate (requires adding the CA fingerprint to the config file)

- adding/removing a lighthouses (hub for publishing IPs for p2p) or relay (for going over p2p)

- CA rotation


AFAICT you and 'ysleepy are in agreement.

We are, wireguard needs O(N) updates to add a node to every other node.

This problem has been brought up in the OpenZiti community many times. I like Nebula, but it's not 'truly open source'.

What do you mean?

Referring to the previous person's comment, that you need to manage a PKI and have to distribute the keys yourself, no auth/login etc.

How does that make it not "truly open source"?

I made a shell script that does most of that for my needs.


Fair, I was being loose with my language. What I should have said is that it does not come fully featured open source, that you need to do a certain amount of rolling your own.

The same could be said for a webserver, a radius server, etc. I mean ssh "requires" a network to be remotely useful :)

Edit, since I can't reply sadly:

You're right, that was a bad example.

I can probably list at least a few dozen things that all require certificates though, which was really my point. Everything has dependencies.

Also if you just... Don't trust big tech, run your own CA.


Right, but if certificates are a fundamental part of your design, you should include the functional mechanisms to manage them imho (i.e., key distribution, auth/login). The developers created it, but they keep it in the commercial product. Other overlays which use PKI include those functions in the FOSS.

nah, I dont buy that. A network is not a functional requirement of SSH etc in your use case.

What about DNS integration? As far as I know, you can't resolve nodes by name (http://media-server), you have to use node's internal IP.

Nebula uses lighthouses instead of DNS for finding other nodes.

https://github.com/slackhq/nebula?tab=readme-ov-file#2-optio...


Yes, but when you connect your phone to a Nebula network, and go to http://media-server in your browser, the DNS won't resolve it to your desired node, because the phone client (same on desktop) didn't update DNS of the phone, so you'll have to use node's IP address.

That's what I've read (when evaluating Nebula), at least.


It doesn't automatically update, that's true. But I think the typical way to deal with this is to have a nebula subdomain. www.nebula.example.com instead of www.example.com.

I haven't thought about it, thanks

When your nodes are not very numerous, and their IPs are statically assigned, you can just have them in a hosts file, or even served by your normal name server if you're using a split-horizon configuration.

Editing hosts file seems unwieldy, and impossible on a phone without rooting it, AFAIK

> split-horizon configuration

Is it when your local router redirects media-server.mydomain.com to a local IP, and say Cloudflare DNS redirects it to your Nebula IP?


it his much complex to setup then wireguard based?

It is the easiest to setup and understand really. There are no users, just hosts and their keys.

What it doesn't offer is a gui or tool to handle copying/installing/revocating keys so you trade super easy setup for a handful of nodes to management overhead if you are scaling up and down regularly.


I run AssetRoom, which sends AI summaries of SEC filings. Found myself wanting a quicker way to discover interesting companies and hear what others think about them.

So I added a weekly poll. I pick a stock, show some key facts, and let people vote and discuss whether it’s overvalued or a hidden gem. Takes a few minutes, usually learn something.

https://www.assetroom.net/diamond-or-dud


By default free plans can run 5x concurrently on self-hosted, 20x minimum for all paying customers, and yes there's a "talk to sales" for >20x on the pricing page


Is that because you have loads of users? (curious CircleCI employee here)


Your pricing page seems to have changed intra-day. but now it's about $400ish.

30 users + 500 builds.

However I don't know what counts as a build, since a typical commit to an open PR uses 10 GH runner machines simultaneously doing odd jobs like integration tests, releases, deploys, etc...


Can you send a link to the page you’re looking at? Thanks!

Pricing should mostly just be users + build minutes (for cloud runners) + storage. There is a few other optional, feature specific costs. Self hosted runners are free, but you need to self host caches/workspaces - our native ones have an egress bill to self hosted runners.


https://circleci.com/pricing/build-your-plan/

If self-hosted runners are free that would change our equation a bit. I'll talk to some folks here, I liked using this product at another company I worked at - but this would most likely shake out AFTER Github charges us the first time.


Good to know - and I can see the confusion on that page - I'll pass on the feedback, thanks!


Created a community based poll where we vote and comment on a different stock every week.

https://www.assetroom.net/diamond-or-dud

Would love feedback.


I'm working on AssetRoom, a free service to email you noise-free, easy to digest summaries of SEC filings from companies you're interested in.

I often read about interesting public companies (from an investment perspective or otherwise), but fail to then keep up with them over time (sometimes reading many months/years later how successful they were - or not!). I built this to make an easy way for me to follow updates from said companies.

https://www.assetroom.net/


Looks nice, my only initial nit is to change “twitter” to “x” in the footer, some people get very touchy about that haha


Signed up but not getting the verification email. Interested in the execution though.


just seen it- i think you made a typo in your email (.clm instead of .com) - I'll correct and re-send!


Thanks! Got it

Only feedback so far — I wish there was a bit of formatting for the numbers. The big blocks of text are hard to scan for important details.

Bullets are the first thing I can think of.


Thanks! Will make a note of this, for sure scope to make them easier to digest.


I'm working on AssetRoom, a free service to email you noise-free, easy to digest summaries of SEC filings from companies you're interested in.

https://www.assetroom.net/


That is absolutely absurd that you have built something many have tried and failed to do with millions of dollars of venture capital behind them, all on your own.

Genuine kudos to you, you should be an inspiration to any indie hacker.


Part of the problem with venture funding is 10m arr wouldn't be considered enough.


Totally. But regardless lots of ideas get funded that turn out not to be "venture scale" and many at an early stage that do not even get to $10m ARR.



+1 for iwantmyname - such a simple service - does exactly what I want without any fuss


Yes, I moved some stuff from Hover to iwantmyname because they don’t abstract anything important and there’s no clutter. Hover isn’t bad, but I was looking for something even more geek-appealing!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: