How I learned to stop worrying and love userspace networking

The author discusses self-hosting using k3s at home and on fly.io in the cloud. They wanted to enable workloads on k3s to access an AI server on fly without setting up a VPN or exposing the server to the internet, leading them to create a userspace TCP/IP stack using wireguard-go. This effort resulted in the creation of a Go program called glaceon that acts as an HTTP reverse proxy over WireGuard. They also explored creating Kubernetes operators using operator-sdk, allowing them to easily program Kubernetes operators based on best practices. The process involved creating a MachineProxy resource making apps accessible via http://twi-ollama.flycast.

https://friendshipcastle.zip/blog/glaceon

To top