Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I would suggest that instead of trying to maintain shared state (which IP addresses are blessed) across all of your nodes, you look into using ipsec. Those internal interfaces aren't for security, they're to segment cheap/fast network traffic internal to the dc from expensive/slow/metered traffic that hits the Internet.

https://en.wikipedia.org/wiki/Opportunistic_encryption



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: