Rayfish - P2P VPN built on top of Iroh
19 points by tomas
19 points by tomas
This seems like a genuinely cool product and the only thing stopping me from swapping out my tailscale mesh for it is the lack of an android client, however the article reads like it was at least partially AI written and that was a bit annoying
did you see this? https://github.com/rayfish/rayfish/blob/9e142411008f70228fccf9eb109af6a5d058c4e6/android/app/src/main/java/xyz/rayfish/android/RayfishVpnService.kt and it seems they publish debug apk builds on their nightly tags https://github.com/rayfish/rayfish/releases/download/nightly/rayfish-android.apk
I only saw this posting 5 minutes ago, so that link is as much as I know about whether it works or not
Hmmmm... That is interesting. I noticed there was some android related stuff in the repo but didn't see any builds in the latest release. I'll have to check it out
dealing with more than one network at a time […] Rayfish assumes that from the start
HELL YEAH! Actually might be a serious advantage since it doesn't seem to be a priority for Tailscale..
is a spinoff from [..] a high frequency trading firm
Wow, that was unexpected!
Speed is the one place Tailscale usually wins. Its WireGuard data plane runs in the kernel
Tailscale absolutely does not kernel WG whatsoever but people keep making this assumption…
The ideas, the product, and the words are mine
And yet there's a CLAUDE.md :( To be fair, in the contributors summary clod has 1,017++ 383-- lines credited to it compared to the author's 104,786++ 47,064-- so it seems that the vast majority of the code was not slopped up, but why even bother touching clod at this point? Why get the mark of the anus on your repo for the sake of 1/100th of the work?
I wouldn’t mind if it was AI-assisted. What matters to me is real-world usage. A truly decentralized Tailscale alternative would be huge. So far, I’ve mostly seen Iroh used in cute but not very useful ways; this might be the app.
that still privileges the operator of the headscale instance, right? headscale lets you take TS the company out of the picture, but it seems like it doesn’t meet the mark for “truly decentralized.”
I do like headscale, but it is a pain to disable all the botnet in tailscale every time I install it on an endpoint
I'm curious what you mean. Does Tailscale phone home to TS servers even when you're using headscale as a control server? (If so, how would I go about disabling this?)
Derp relays you set up your own derp servers. Client side logging is disabled by overriding an env variable or adding a launch argument on each endpoint and might not work on Android. Disabling captive portal detection has been added as a policy in a recent release, but it's not in my distro (NixOS) repo yet.
Also iroh so there's quic which means you might be able to have post-quantum encryption on your mesh vpn finally. Which also doesn't seem to be a priority.