Hey. I’m currently using Tailscale with a self hosted control server(headscale). The problem’s that when the control server goes down for several days(Internet outage, here, in Iran), the clients get lost. And I have to come up with a new control server.
So I’m looking for a solution similar to Tailscale+Headscale, but with decentralized control server and relay.
Note that raw wireguard is not a solution. As some clients are(or might be) behind NATs. And then they will either need hole punching or a relay.
I’m not sure it is censorship resistant
It’s not, but it doesn’t look like they need hardcore censorship resistance if they are able to host and use headscale. It looks like their main problem is internet outages.
I have been in environmenrs where any usage of wireguard is automatically fingerprinted and blocked.
During the Internet outages in Iran, most of the nodes inside the country are still accessible through most ISPs. The advertised self healing of yggdrasil sounds promising.
But just for anyone else’s information reading this, we also have censorship on servers inside the country. TLDR, the law has completely vanished in here. You just have to fight, or hide to not get censored or otherwise caught.
What’s your threat model? No matter what, hole-punching will require some sort of relay. Yggdrasil’s likelier than Iroh to have available community servers if you need a hole punched in an adversarial context.