Post #1406368
2026-03-08 12:53 UTC
@zrail@hachyderm.io @homelab@fedigroups.social I'm currently using cilium for wireguard between talos k8s nodes, but not their kubespan offering because of conflicts with certain cilium features. The node to node traffic (as opposed to pod traffic) uses wireguard for the remote nodes only. That traffic is entirely secured via TLS so I'm not as worried about the local nodes
Replies (1)
-
@zrail@hachyderm.io 2026-03-08 12:59
@rachel @homelab I don't have any of that with my "spicy docker compose" setup so I was shunting stuff like VMSave and tinyauth backhaul across Tailscale. The thing I realized at some point was that I know all of the nodes and their local IPs due to my static deployment model. Adding a Wireguard mesh is then just generating keys and a conf for every server and making sure wg-quick does its thing.