Skip to content
Register

wireguard hub-and-spoke vs mesh: my 20-node headache

VPS Hosting by ronwit 24 replies 2.4K views
ronwit

Member OP

Budget King

14 #1

Hello I have 20 node headache actually. Currently running WireGuard hub-and-spoke, one HostHatch VPS as hub, 19 spoke mostly Raspberry Pi and old laptop. Basically when hub goes down, whole network down. I draw network diagram in draw.io, very beautiful, my wife say "ron why you spend 3 hours on this" (´・ω・｀). Should I switch to mesh? But 20 nodes mean 190 connections, too many. Actually I heard about Headscale, self-hosted Tailscale control plane. Anyone try? Is good for 20 node?

instant noodles, instant deploys
kasiaxus

Member

8 #2

My setup is 25 node , I use headscale, this is very good xd, no central hub, all node talk direct, I have this on KnownHost cheapest vps, 1cpu 1gb, no problem, setup take maybe 2 hour, I follow github readme, this is easy actually, you should try this, ron, no more single point of failure, your diagram is pretty but hub is bad xd

POLISH SERVERS. LOUD FANS. GOOD PRICE.
pablowild

Member

#3

¡Jajaja! ¿190 connections? Is very crazy. I try mesh with 15 node once, was disaster. Then I find Headscale, is very beautiful. But I write long post about my journey, then delete, too embarrassing. Short version: Headscale work perfect. My config is on GreenCloudVPS, $3/month. But actually... ¿did you check Tailscale free tier? 20 user is free. I spend three weekend on Headscale, my time is very not free. Is very ironic. ¡Jajaja!

CO

Member

#4

The hub model is dead brtoher I swtiched to headscale lasst year on RackNerd nevre looked back runs perfect you figure it out he says 20 nodes is nothing dont overthink it the mesh is the way just do itt

emalite

Member

Lisbon

#5

20 node mesh is pain, I feel you ron

Ray

Member

8 #6

Following this. I have 12 nodes in my garage and one more at my son's place in Tucson. Hub-and-spoke on a RackNerd box in LA, $18/year during their sale. Single point of failure keeps me up at night, and I already don't sleep.

steveipw

Member

#7

Hub-and-spoke has its place. I run ZFS send/recv over WireGuard and I want my backup target knowing exactly one peer, not nineteen. Mesh is not automatically better, it depends on your traffic pattern.

zfs send | zfs receive. repeat.
kasiaxus

Member

6 #8

ronwit said:
I draw network diagram in draw.io, very beautiful, my wife say "ron why you spend 3 hours on this" (´・ω・｀).
My husband say same about my network diagram in visio, I say "this is art, you not understand", he say "you have 25 node why", I say "because I can" xd

POLISH SERVERS. LOUD FANS. GOOD PRICE.
ronwit

Member OP

Budget King

#9

kasiaxus said:
This is art, you not understand
YES! Finally someone understand. My wife say "just use Hamachi like normal person" but Hamachi is dead to me since 2016.

instant noodles, instant deploys
harbourops

Member

#10

Thirty client sites here, I use plain WireGuard hub-and-spoke with two hubs in different DCs for failover. Headscale is nice but "no central hub" is marketing. The control plane is a hub, you just don't notice it until it breaks.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft