10k Times Faster, 10k Times Simpler
tailscale.com
tailscale.com
I was shocked to find the number of netfilter rules in place, all of which made the normal linux routing table useless.
I think a lot of what they're doing is neat, but when you're trying to debug forwarding rules on a box running docker as well, it kind of becomes a nightmare.
Docker messes heavily with the forwarding tables as well. One or the other is fine, but mixing the two is kind of a nightmare to sort through.
Nor is disk IO.