Hacker News Reader

This is great! I've been thinking about the problems this solves a lot, and this seems really on the mark.

Thanks, author here.

I've been thinking about what we need to simplify distributed applications for the past few years, and we really need reusable components[1]. Anything we can do to make containers more consistent and easier to build is important.

[1] https://medium.com/@vishvananda/standard-components-not-stan...

Is the IPSEC implementation based on existing code?

The ipsec implementation just configures ipsec in the kernel using a go netlink library[1]. It is similar to how it would be accomplished using iproute2 via `ip xfrm policy` and `ip xfrm state`.

[1] https://github.com/vishvananda/netlink

Reply on news.ycombinator.com