Hacker News Reader

As mentioned in the comparison sections, other products use security tags to achieve this. So I'm assuming that it isn't supported except by relying on external firewalls.

Also interesting to note no mention of zerotier anywhere in the doc or comparisons

View on HN

Yea, I inferred that was the purpose of the tags, though I didn't see the capability mentioned explicitly anywhere.

It doesn't seem like a fundamental limitation; if innernet let a single machine have multiple wireguard interfaces, each on different subnets, that would seem to be an elegant solution. But I didn't see mention of that, either.

IIRC, what you suggested is exactly how zerotier implements it

Huh. I think you're right. Though, zerotier uses central servers, has a significant performance hit compared to a wireguard solution, and is an L2 rather than L3 solution (the last isn't really a downside though).

Reply on news.ycombinator.com