Post #1963350

A blog series on my descent into maddness with PKI/etc would probably be interesting But first I can finish out the networking series (latest post here). The last part for now will be about taking the engress policy features and wireguard and then creating a wireguard interface on a Talos linux node, and then assigning routing rules to a non-default table, so only traffic assigned to that interface uses it. The end result: ability to create a egress policy targeting a pod, and send all outbound traffic out over that VPN link. I could have done this for the web services that I am having exit on the cloud node, but I want to eventually put caching on the edge. Of course the goal here with the wireguard exit was to use ProtonVPN for a download client...... #Homelab #Networking #Kubernetes #Talos