summaryrefslogtreecommitdiff
path: root/gemfeed
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-01-11 22:23:34 +0200
committerPaul Buetow <paul@buetow.org>2026-01-11 22:23:34 +0200
commit27852f56299a59900826e96a7ac196a08d995438 (patch)
treeb92be1f9df7b3d05d8a5ffda8a596c0f8638dca0 /gemfeed
parentb75eacc0d8f7797358be3c87233bfc8e20016490 (diff)
Integrate roaming client content throughout blog post
Rewrote Part 5 blog post to seamlessly integrate roaming client (earth, pixel7pro) content throughout instead of having it as a separate update section. The post now reads as one cohesive article. Changes: - Simplified header note about roaming clients (removed large update section) - Updated introduction to include roaming clients in topology description - Added roaming traffic patterns to "Expected traffic flow" section - Updated YAML config example to show earth and pixel7pro entries with exclude_peers - Added roaming client wg0.conf example after infrastructure example - Added OpenBSD NAT/PF configuration section with detailed firewall rules - Added roaming client /etc/hosts entries for earth and pixel7pro - Added "Setting up roaming clients" subsection covering Android QR code and Fedora setup - Removed separate "Adding Roaming Clients (Update)" section at end - Deleted old wireguard-full-mesh.svg (without roaming clients) - Updated wireguard-full-mesh-with-roaming.svg with improved positioning The blog post now flows naturally as if roaming clients were part of the original design, making it easier to read and understand the complete mesh network setup. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Diffstat (limited to 'gemfeed')
-rw-r--r--gemfeed/2025-05-11-f3s-kubernetes-with-freebsd-part-5.gmi.tpl379
-rw-r--r--gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg526
-rw-r--r--gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh.svg772
3 files changed, 412 insertions, 1265 deletions
diff --git a/gemfeed/2025-05-11-f3s-kubernetes-with-freebsd-part-5.gmi.tpl b/gemfeed/2025-05-11-f3s-kubernetes-with-freebsd-part-5.gmi.tpl
index 9c5b8fe3..1cdbe144 100644
--- a/gemfeed/2025-05-11-f3s-kubernetes-with-freebsd-part-5.gmi.tpl
+++ b/gemfeed/2025-05-11-f3s-kubernetes-with-freebsd-part-5.gmi.tpl
@@ -6,6 +6,8 @@ This is the fifth blog post about my f3s series for my self-hosting demands in m
I will post a new entry every month or so (there are too many other side projects for more frequent updates — I bet you can understand).
+> **Note (January 2026):** This post has been updated to include two roaming clients (`earth` - Fedora laptop, `pixel7pro` - Android phone) that connect to the mesh via the internet gateways. The updated content is integrated throughout the post.
+
These are all the posts so far:
<< template::inline::index f3s
@@ -18,55 +20,42 @@ Let's begin...
<< template::inline::toc
-## Update: Roaming Client Support Added (January 2026)
-
-**Note:** After publishing this blog post, two roaming clients were added to the WireGuard mesh: `earth` (Fedora laptop, 192.168.2.200) and `pixel7pro` (Android phone, 192.168.2.201). These clients connect exclusively to the two internet-facing OpenBSD gateways (`blowfish` and `fishfinger`) rather than participating in the full mesh.
-
-Key changes implemented:
-
-* **Client-only architecture**: Roaming clients initiate connections to gateways but are not reachable by LAN hosts (f0-f2, r0-r2)
-* **All-traffic routing**: Both clients route all traffic (0.0.0.0/0) through the VPN for internet access
-* **NAT masquerading**: OpenBSD gateways configured with PF NAT rules to allow roaming clients to access the internet
-* **DNS configuration**: Roaming clients use Cloudflare (1.1.1.1) and Google (8.8.8.8) DNS servers
-* **No automatic failover**: WireGuard does not support automatic failover by design. If one gateway fails, manual reconnection is required to switch to the backup gateway
-
-The `earth` laptop is configured for manual VPN activation only (service disabled from auto-start), while the Android phone uses the official WireGuard Android client from the Google Play Store.
-
-Infrastructure as Code updates:
-
-* Added `/home/paul/git/conf/frontends/etc/pf.conf.tpl` with WireGuard NAT rules
-* Added Rex deployment task for automated PF firewall configuration
-* Modified `wireguardmeshgenerator.rb` to detect and handle roaming clients with proper PersistentKeepalive and AllowedIPs settings
-
-For details on the implementation, see the planning document at `/home/paul/git/conf/f3s/wireguardroaming-plan.md` in the repository.
-
## Introduction
-By default, traffic within my home LAN, including traffic inside a k3s cluster, is not encrypted. While it resides in the "secure" home LAN, adopting a zero-trust policy means encryption is still preferable to ensure confidentiality and security. So we decide to secure all the traffic of all f3s participating hosts by building a mesh network of all participating hosts:
+By default, traffic within my home LAN, including traffic inside a k3s cluster, is not encrypted. While it resides in the "secure" home LAN, adopting a zero-trust policy means encryption is still preferable to ensure confidentiality and security. So we decide to secure all the traffic of all f3s participating hosts by building a mesh network:
-=> ./f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh.svg Full mesh network
+=> ./f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg WireGuard mesh network topology
-Whereas `f0`, `f1`, and `f2` are the FreeBSD base hosts, `r0`, `r1`, and `r2` are the Rocky Linux Bhyve VMs, and `blowfish` and `fishfinger` are two OpenBSD systems running on the internet (as mentioned in the first blog of this series—these systems are already built; in fact, this very blog is served by those OpenBSD systems).
+The mesh network consists of eight infrastructure hosts and two roaming clients:
-**Update (January 2026):** Two roaming clients have been added to the setup: `earth` (Fedora laptop) and `pixel7pro` (Android phone). Unlike the full-mesh participants, these clients connect only to the two internet-facing gateways (`blowfish` and `fishfinger`) for internet access and are not reachable by the LAN hosts. See the update section above for details.
+**Infrastructure hosts (full mesh):**
+* `f0`, `f1`, and `f2` are the FreeBSD base hosts in my home LAN
+* `r0`, `r1`, and `r2` are the Rocky Linux Bhyve VMs running on the FreeBSD hosts
+* `blowfish` and `fishfinger` are two OpenBSD systems running on the internet (as mentioned in the first blog of this series—these systems are already built; in fact, this very blog is served by those OpenBSD systems)
-=> ./f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg Updated mesh network with roaming clients
+**Roaming clients (gateway-only connections):**
+* `earth` is my Fedora laptop (192.168.2.200) which connects only to the internet gateways for remote access
+* `pixel7pro` is my Android phone (192.168.2.201) which routes all traffic through the VPN when activated
-As we can see from the graphs, the original eight hosts form a true full-mesh network, where every host has a VPN tunnel to every other host. The benefit is that we do not need to route traffic through intermediate hosts (significantly simplifying the routing configuration). However, the downside is that there is some overhead in configuring and managing all the tunnels.
+As we can see from the diagram, the eight infrastructure hosts form a true full-mesh network, where every host has a VPN tunnel to every other host. The benefit is that we do not need to route traffic through intermediate hosts (significantly simplifying the routing configuration). However, the downside is that there is some overhead in configuring and managing all the tunnels. The roaming clients take a simpler approach—they only connect to the two internet-facing gateways (`blowfish` and `fishfinger`), which is sufficient for remote access and internet connectivity.
For simplicity, we also establish VPN tunnels between `f0 <-> r0`, `f1 <-> r1`, and `f2 <-> r2`. Technically, this wouldn't be strictly required since the VMs `rN` are running on the hosts `fN`, and no network traffic is leaving the box. However, it simplifies the configuration as we don't have to account for exceptions, and we are going to automate the mesh network configuration anyway (read on).
### Expected traffic flow
-The traffic is expected to flow between the host groups through the mesh network as follows:
+The traffic is expected to flow between the host groups through the mesh network as follows:
-* `fN <-> rN`: The traffic between the FreeBSD hosts and the Rocky Linux VMs will be routed through the VPN tunnels for persistent storage. In a later post in this series, we will set up an NFS server on the `fN` hosts.
+**Infrastructure mesh traffic:**
+* `fN <-> rN`: The traffic between the FreeBSD hosts and the Rocky Linux VMs will be routed through the VPN tunnels for persistent storage. In a later post in this series, we will set up an NFS server on the `fN` hosts.
* `fN <-> blowfish,fishfinger`: The traffic between the FreeBSD hosts and the OpenBSD host `blowfish,fishfinger` will be routed through the VPN tunnels for management. We may want to log in via the internet to set it up remotely. The VPN tunnel will also be used for monitoring purposes.
* `rN <-> blowfish,fishfinger`: The traffic between the Rocky Linux VMs and the OpenBSD host `blowfish,fishfinger` will be routed through the VPN tunnels for usage traffic. Since k3s will be running on the `rN` hosts, the OpenBSD servers will route the traffic through `relayd` to the services running in Kubernetes.
* `fN <-> fM`: The traffic between the FreeBSD hosts may be later used for data replication for the NFS storage.
* `rN <-> rM`: The traffic between the Rocky Linux VMs will later be used by the k3s cluster itself, as every `rN` will be a Kubernetes worker node.
* `blowfish <-> fishfinger`: The traffic between the OpenBSD hosts isn't strictly required for this setup, but I set it up anyway for future use cases.
+**Roaming client traffic:**
+* `earth,pixel7pro <-> blowfish,fishfinger`: The roaming clients connect exclusively to the two internet gateways. All traffic from these clients (0.0.0.0/0) is routed through the VPN, providing secure internet access and the ability to reach services running in the mesh (via the gateways). The gateways use NAT to allow roaming clients to access the internet using the gateway's public IP address. The roaming clients cannot be reached by the LAN hosts—they are client-only and initiate all connections.
+
We won't cover all the details in this blog post, as we only focus on setting up the Mesh network in this blog post. Subsequent posts in this series will cover the other details.
## Deciding on WireGuard
@@ -237,9 +226,30 @@ blowfish$ cat <<END | doas tee -a /etc/hosts
192.168.2.110 blowfish.wg0 blowfish.wg0.wan.buetow.org
192.168.2.111 fishfinger.wg0 fishfinger.wg0.wan.buetow.org
+192.168.2.200 earth.wg0 earth.wg0.wan.buetow.org
+192.168.2.201 pixel7pro.wg0 pixel7pro.wg0.wan.buetow.org
END
```
+To enable roaming clients (like `earth` and `pixel7pro`) to access the internet through the VPN, we need to configure NAT on the OpenBSD gateways. This allows the roaming clients to use the gateway's public IP address for outbound traffic. We add the following to `/etc/pf.conf` on both `blowfish` and `fishfinger`:
+
+```sh
+# NAT for WireGuard clients to access internet
+match out on vio0 from 192.168.2.0/24 to any nat-to (vio0)
+
+# Allow inbound traffic on WireGuard interface
+pass in on wg0
+
+# Allow all UDP traffic on WireGuard port
+pass in inet proto udp from any to any port 56709
+```
+
+The NAT rule translates outgoing traffic from the WireGuard network (192.168.2.0/24) to the gateway's public IP. The firewall rules permit WireGuard traffic on the wg0 interface and UDP port 56709. After updating `/etc/pf.conf`, reload the firewall:
+
+```sh
+blowfish$ doas pfctl -f /etc/pf.conf
+```
+
## WireGuard configuration
So far, we have only started WireGuard on all participating hosts without any useful configuration. This means that no VPN tunnel has been established yet between any of the hosts.
@@ -312,7 +322,40 @@ Endpoint = 46.23.94.99:56709
PersistentKeepalive = 25
```
-Whereas there are two main sections. One is `[Interface]`, which configures the current host (here: `f0`):
+For roaming clients like `pixel7pro` (Android phone) or `earth` (Fedora laptop), the configuration looks different because they route all traffic through the VPN and only connect to the internet gateways:
+
+```
+[Interface]
+# pixel7pro.wg0.wan.buetow.org
+Address = 192.168.2.201
+PrivateKey = **************************
+ListenPort = 56709
+DNS = 1.1.1.1, 8.8.8.8
+
+[Peer]
+# blowfish.buetow.org as blowfish.wg0.wan.buetow.org
+PublicKey = **************************
+PresharedKey = **************************
+AllowedIPs = 0.0.0.0/0, ::/0
+Endpoint = 23.88.35.144:56709
+PersistentKeepalive = 25
+
+[Peer]
+# fishfinger.buetow.org as fishfinger.wg0.wan.buetow.org
+PublicKey = **************************
+PresharedKey = **************************
+AllowedIPs = 0.0.0.0/0, ::/0
+Endpoint = 46.23.94.99:56709
+PersistentKeepalive = 25
+```
+
+Note the key differences for roaming clients:
+* `DNS` is configured to use external DNS servers (Cloudflare and Google)
+* `AllowedIPs = 0.0.0.0/0, ::/0` routes all traffic (IPv4 and IPv6) through the VPN
+* Only two peers are configured (the internet gateways), not the full mesh
+* `PersistentKeepalive = 25` is used for both peers to maintain NAT traversal
+
+Whereas there are two main sections. One is `[Interface]`, which configures the current host (here: `f0` or `pixel7pro`):
* `Address`: Local virtual IP address on the WireGuard interface.
* `PrivateKey`: Private key for this node.
@@ -385,32 +428,12 @@ hosts:
wg0:
domain: 'wg0.wan.buetow.org'
ip: '192.168.2.130'
- f1:
- os: FreeBSD
- ssh:
- user: paul
- conf_dir: /usr/local/etc/wireguard
- sudo_cmd: doas
- reload_cmd: service wireguard reload
- lan:
- domain: 'lan.buetow.org'
- ip: '192.168.1.131'
- wg0:
- domain: 'wg0.wan.buetow.org'
- ip: '192.168.2.131'
- f2:
- os: FreeBSD
- ssh:
- user: paul
- conf_dir: /usr/local/etc/wireguard
- sudo_cmd: doas
- reload_cmd: service wireguard reload
- lan:
- domain: 'lan.buetow.org'
- ip: '192.168.1.132'
- wg0:
- domain: 'wg0.wan.buetow.org'
- ip: '192.168.2.132'
+ exclude_peers:
+ - earth
+ - pixel7pro
+ # f1 and f2 similarly configured with exclude_peers for roaming clients
+ # (full config omitted for brevity)
+ ...
r0:
os: Linux
ssh:
@@ -424,36 +447,16 @@ hosts:
wg0:
domain: 'wg0.wan.buetow.org'
ip: '192.168.2.120'
- r1:
- os: Linux
- ssh:
- user: root
- conf_dir: /etc/wireguard
- sudo_cmd:
- reload_cmd: systemctl reload wg-quick@wg0.service
- lan:
- domain: 'lan.buetow.org'
- ip: '192.168.1.121'
- wg0:
- domain: 'wg0.wan.buetow.org'
- ip: '192.168.2.121'
- r2:
- os: Linux
- ssh:
- user: root
- conf_dir: /etc/wireguard
- sudo_cmd:
- reload_cmd: systemctl reload wg-quick@wg0.service
- lan:
- domain: 'lan.buetow.org'
- ip: '192.168.1.122'
- wg0:
- domain: 'wg0.wan.buetow.org'
- ip: '192.168.2.122'
+ exclude_peers:
+ - earth
+ - pixel7pro
+ # r1 and r2 similarly configured
+ ...
blowfish:
os: OpenBSD
ssh:
user: rex
+ port: 2
conf_dir: /etc/wireguard
sudo_cmd: doas
reload_cmd: sh /etc/netstart wg0
@@ -463,10 +466,14 @@ hosts:
wg0:
domain: 'wg0.wan.buetow.org'
ip: '192.168.2.110'
+ exclude_peers:
+ - earth
+ - pixel7pro
fishfinger:
os: OpenBSD
ssh:
user: rex
+ port: 2
conf_dir: /etc/wireguard
sudo_cmd: doas
reload_cmd: sh /etc/netstart wg0
@@ -476,10 +483,41 @@ hosts:
wg0:
domain: 'wg0.wan.buetow.org'
ip: '192.168.2.111'
+ exclude_peers:
+ - earth
+ - pixel7pro
+ earth:
+ os: Linux
+ wg0:
+ domain: 'wg0.wan.buetow.org'
+ ip: '192.168.2.200'
+ exclude_peers:
+ - f0
+ - f1
+ - f2
+ - r0
+ - r1
+ - r2
+ - pixel7pro
+ pixel7pro:
+ os: Android
+ wg0:
+ domain: 'wg0.wan.buetow.org'
+ ip: '192.168.2.201'
+ exclude_peers:
+ - f0
+ - f1
+ - f2
+ - r0
+ - r1
+ - r2
+ - earth
```
The file specifies details such as SSH user settings, configuration directories, sudo or reload commands, and IP/domain assignments for both internal LAN-facing interfaces and WireGuard (`wg0`) interfaces. Each host is assigned specific roles, including internal participants and publicly accessible nodes with internet-facing IPs, enabling the creation of a fully connected mesh VPN.
+**Roaming clients:** Note the `earth` and `pixel7pro` entries—these are configured differently from the infrastructure hosts. They have no `lan` or `internet` sections, which signals to the generator that they are roaming clients. The `exclude_peers` configuration ensures they only connect to the internet gateways (`blowfish` and `fishfinger`) and are not reachable by LAN hosts. The generator automatically configures these clients with `AllowedIPs = 0.0.0.0/0, ::/0` to route all traffic through the VPN, includes DNS configuration (`1.1.1.1, 8.8.8.8`), and enables `PersistentKeepalive` for NAT traversal.
+
### `wireguardmeshgenerator.rb` overview
The `wireguardmeshgenerator.rb` script consists of the following base classes:
@@ -742,6 +780,34 @@ The mesh network can be re-generated and re-installed as follows:
That would also delete and re-generate all the keys involved.
+### Setting up roaming clients
+
+For roaming clients like `earth` (Fedora laptop) and `pixel7pro` (Android phone), the setup process differs slightly since these devices are not always accessible via SSH:
+
+**Android phone (`pixel7pro`):**
+
+The configuration is transferred to the phone using a QR code. The official WireGuard Android app (from Google Play Store) can scan and import the configuration:
+
+```sh
+> sudo dnf install qrencode
+> qrencode -t ansiutf8 < dist/pixel7pro/etc/wireguard/wg0.conf
+```
+
+Scan the QR code with the WireGuard app to import the configuration. The phone will then route all traffic through the VPN when the tunnel is activated. Note that WireGuard does not support automatic failover between the two gateways (`blowfish` and `fishfinger`)—if one fails, manual disconnection and reconnection is required to switch to the other.
+
+**Fedora laptop (`earth`):**
+
+For the laptop, manually copy the generated configuration:
+
+```sh
+> sudo cp dist/earth/etc/wireguard/wg0.conf /etc/wireguard/
+> sudo chmod 600 /etc/wireguard/wg0.conf
+> sudo systemctl start wg-quick@wg0.service # Start manually
+> sudo systemctl disable wg-quick@wg0.service # Prevent auto-start
+```
+
+The service is disabled from auto-start so the VPN is only active when manually started. This allows selective VPN usage based on need.
+
## Happy WireGuard-ing
All is set up now. E.g. on `f0`:
@@ -920,153 +986,6 @@ peer: 2htXdNcxzpI2FdPDJy4T4VGtm1wpMEQu1AkQHjNY6F8=
allowed ips: 192.168.2.131/32
```
-## Adding Roaming Clients (Update: January 2026)
-
-After setting up the full-mesh network for the infrastructure hosts, two roaming clients were added to enable remote VPN access: a Fedora laptop (`earth`) and an Android phone (`pixel7pro`).
-
-### Design Decisions
-
-Unlike the full-mesh participants, roaming clients:
-
-* **Connect only to internet gateways**: Both clients peer exclusively with `blowfish` and `fishfinger`, not with LAN hosts
-* **Route all traffic through VPN**: AllowedIPs set to `0.0.0.0/0, ::/0` for complete internet access through the VPN
-* **Cannot be reached by LAN hosts**: Using `exclude_peers` configuration to prevent LAN hosts from initiating connections to roaming clients
-* **Maintain persistent keepalive**: PersistentKeepalive set to 25 seconds on all peer connections to maintain NAT traversal
-
-### WireGuard Mesh Generator Modifications
-
-The Ruby-based mesh generator (`wireguardmeshgenerator.rb`) was enhanced to detect and handle roaming clients:
-
-```ruby
-# Detect roaming clients (hosts without 'lan' or 'internet' sections)
-is_roaming = !hosts[myself].key?('lan') && !hosts[myself].key?('internet')
-
-# Enable keepalive for roaming clients
-keepalive = is_roaming || (in_lan && !peer_in_lan)
-
-# Route all traffic for roaming clients
-allowed_ips = is_roaming ? '0.0.0.0/0, ::/0' : data['wg0']['ip']
-
-# Configure DNS for roaming clients
-dns = is_roaming ? 'DNS = 1.1.1.1, 8.8.8.8' : '# No DNS configured'
-```
-
-The YAML configuration for `pixel7pro` looks like this:
-
-```yaml
-pixel7pro:
- os: Android
- wg0:
- domain: 'wg0.wan.buetow.org'
- ip: '192.168.2.201'
- exclude_peers:
- - f0
- - f1
- - f2
- - r0
- - r1
- - r2
- - earth
-```
-
-Note the absence of `lan` and `internet` sections, which identifies it as a roaming client.
-
-### OpenBSD Gateway Configuration
-
-To enable internet access for roaming clients, NAT rules were added to the PF firewall on both OpenBSD gateways:
-
-```
-# NAT for WireGuard clients to access internet
-match out on vio0 from 192.168.2.0/24 to any nat-to (vio0)
-
-# Allow inbound traffic on WireGuard interface
-pass in on wg0
-
-# Allow all UDP traffic on WireGuard port
-pass in inet proto udp from any to any port 56709
-```
-
-These rules are deployed via Infrastructure as Code using Rex (a Perl-based deployment tool):
-
-```sh
-$ cd /home/paul/git/conf/frontends
-$ rex pf # Deploys /etc/pf.conf to both blowfish and fishfinger
-```
-
-### Client Setup
-
-**Android (`pixel7pro`):**
-
-The official WireGuard Android app from the Google Play Store was used. The configuration was transferred by generating a QR code:
-
-```sh
-$ cd /home/paul/git/wireguardmeshgenerator
-$ qrencode -t ansiutf8 < dist/pixel7pro/etc/wireguard/wg0.conf
-```
-
-The generated config contains both gateways with all-traffic routing:
-
-```
-[Interface]
-Address = 192.168.2.201
-PrivateKey = [hidden]
-ListenPort = 56709
-DNS = 1.1.1.1, 8.8.8.8
-
-[Peer] # blowfish
-PublicKey = Xow+d3qVXgUMk4pcRSQ6Fe+vhYBa3VDyHX/4jrGoKns=
-AllowedIPs = 0.0.0.0/0, ::/0
-Endpoint = 23.88.35.144:56709
-PersistentKeepalive = 25
-
-[Peer] # fishfinger
-PublicKey = 8PvGZH1NohHpZPVJyjhctBX9xblsNvYBhpg68FsFcns=
-AllowedIPs = 0.0.0.0/0, ::/0
-Endpoint = 46.23.94.99:56709
-PersistentKeepalive = 25
-```
-
-**Fedora laptop (`earth`):**
-
-WireGuard was installed and configured for manual activation only:
-
-```sh
-$ sudo dnf install wireguard-tools
-$ sudo cp dist/earth/etc/wireguard/wg0.conf /etc/wireguard/
-$ sudo chmod 600 /etc/wireguard/wg0.conf
-$ sudo systemctl disable wg-quick@wg0.service # Prevent auto-start
-$ sudo systemctl start wg-quick@wg0.service # Manual start when needed
-```
-
-### Failover Limitation
-
-**Important:** WireGuard does not support automatic failover between peers. When both gateways are configured with `AllowedIPs = 0.0.0.0/0`, the client establishes a connection to one peer and remains "sticky" to that peer.
-
-Testing showed that when the active gateway (`fishfinger`) was stopped, the phone did not automatically switch to the backup gateway (`blowfish`). This is by design—WireGuard prioritizes simplicity over complex failover logic.
-
-For automatic failover, manual reconnection or external monitoring scripts would be required. For interactive use (phones, laptops), manual reconnection when connectivity issues arise is acceptable.
-
-### Verification
-
-On the phone, connectivity was verified by:
-
-* Checking the WireGuard app shows active tunnel with recent handshakes
-* Accessing `https://ifconfig.me` shows the gateway's public IP address
-* DNS resolution working correctly
-
-On the gateways, roaming clients can be monitored:
-
-```sh
-$ doas wg show | grep -A 6 pixel7pro_public_key
-peer: Asuktmb7fuqaiEucOstuC1g6rQaleubXk9pdTfjtbUs=
- preshared key: (hidden)
- endpoint: 90.154.200.247:49511
- allowed ips: 192.168.2.201/32
- latest handshake: 2 minutes, 15 seconds ago
- transfer: 45.12 KiB received, 52.33 KiB sent
- persistent keepalive: every 25 seconds
-```
-
## Conclusion
Having a mesh network on our hosts is great for securing all the traffic between them for our future k3s setup. A self-managed WireGuard mesh network is better than Tailscale as it eliminates reliance on a third party and provides full control over the configuration. It reduces unnecessary abstraction and "magic," enabling easier debugging and ensuring full ownership of our network.
diff --git a/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg b/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg
index 2f26067c..24c8ec9a 100644
--- a/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg
+++ b/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh-with-roaming.svg
@@ -1,12 +1,12 @@
<?xml version="1.0" encoding="utf-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns:xlink="http://www.w3.org/1999/xlink" width="707.325pt" height="568.74pt" viewBox="0 0 707.325 568.74" xmlns="http://www.w3.org/2000/svg" version="1.1">
+<svg xmlns:xlink="http://www.w3.org/1999/xlink" width="712.8pt" height="596.577969pt" viewBox="0 0 712.8 596.577969" xmlns="http://www.w3.org/2000/svg" version="1.1">
<metadata>
<rdf:RDF xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<cc:Work>
<dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage"/>
- <dc:date>2026-01-11T22:13:15.149841</dc:date>
+ <dc:date>2026-01-11T22:19:21.305547</dc:date>
<dc:format>image/svg+xml</dc:format>
<dc:creator>
<cc:Agent>
@@ -21,307 +21,307 @@
</defs>
<g id="figure_1">
<g id="patch_1">
- <path d="M 0 568.74
-L 707.325 568.74
-L 707.325 0
+ <path d="M 0 596.577969
+L 712.8 596.577969
+L 712.8 0
L 0 0
z
" style="fill: #ffffff"/>
</g>
<g id="axes_1">
<g id="line2d_1">
- <path d="M 353.6625 513.420208
-L 151.174417 446.0525
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 152.312 453.577969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_2">
- <path d="M 353.6625 513.420208
-L 556.150583 446.0525
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 560.488 453.577969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_3">
- <path d="M 353.6625 513.420208
-L 353.6625 55.319792
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 356.4 152.877969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_4">
- <path d="M 353.6625 513.420208
-L 151.174417 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 152.312 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_5">
- <path d="M 353.6625 513.420208
-L 556.150583 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 560.488 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_6">
- <path d="M 353.6625 513.420208
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_7">
- <path d="M 353.6625 513.420208
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 521.477969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_8">
- <path d="M 151.174417 446.0525
-L 556.150583 446.0525
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 560.488 453.577969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_9">
- <path d="M 151.174417 446.0525
-L 353.6625 55.319792
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 356.4 152.877969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_10">
- <path d="M 151.174417 446.0525
-L 151.174417 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 152.312 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_11">
- <path d="M 151.174417 446.0525
-L 556.150583 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 560.488 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_12">
- <path d="M 151.174417 446.0525
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_13">
- <path d="M 151.174417 446.0525
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 453.577969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_14">
- <path d="M 556.150583 446.0525
-L 353.6625 55.319792
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 453.577969
+L 356.4 152.877969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_15">
- <path d="M 556.150583 446.0525
-L 151.174417 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 453.577969
+L 152.312 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_16">
- <path d="M 556.150583 446.0525
-L 556.150583 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 453.577969
+L 560.488 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_17">
- <path d="M 556.150583 446.0525
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 453.577969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_18">
- <path d="M 556.150583 446.0525
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 453.577969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_19">
- <path d="M 353.6625 55.319792
-L 151.174417 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 152.877969
+L 152.312 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_20">
- <path d="M 353.6625 55.319792
-L 556.150583 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 152.877969
+L 560.488 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_21">
- <path d="M 353.6625 55.319792
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 152.877969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_22">
- <path d="M 353.6625 55.319792
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 356.4 152.877969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_23">
- <path d="M 151.174417 122.6875
-L 556.150583 122.6875
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 220.777969
+L 560.488 220.777969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_24">
- <path d="M 151.174417 122.6875
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 220.777969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_25">
- <path d="M 151.174417 122.6875
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 152.312 220.777969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_26">
- <path d="M 556.150583 122.6875
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 220.777969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_27">
- <path d="M 556.150583 122.6875
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 560.488 220.777969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_28">
- <path d="M 67.34974 284.37
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
+ <path d="M 67.825 337.177969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="line2d_29">
- <path d="M 122.6875 41.84625
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
+ <path d="M 181.8 60.727969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
</g>
<g id="line2d_30">
- <path d="M 122.6875 41.84625
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
+ <path d="M 181.8 60.727969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
</g>
<g id="line2d_31">
- <path d="M 353.6625 12.974375
-L 67.34974 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
+ <path d="M 531 60.727969
+L 67.825 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
</g>
<g id="line2d_32">
- <path d="M 353.6625 12.974375
-L 639.97526 284.37
-" clip-path="url(#p641b35479b)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
+ <path d="M 531 60.727969
+L 644.975 337.177969
+" clip-path="url(#pac2ac733d1)" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-opacity: 0.7; stroke-width: 1.5"/>
</g>
<g id="patch_2">
- <path d="M 353.6625 537.480104
-C 360.043259 537.480104 366.163538 534.945002 370.675415 530.433124
-C 375.187293 525.921246 377.722396 519.800967 377.722396 513.420208
-C 377.722396 507.039449 375.187293 500.919171 370.675415 496.407293
-C 366.163538 491.895415 360.043259 489.360312 353.6625 489.360312
-C 347.281741 489.360312 341.161462 491.895415 336.649585 496.407293
-C 332.137707 500.919171 329.602604 507.039449 329.602604 513.420208
-C 329.602604 519.800967 332.137707 525.921246 336.649585 530.433124
-C 341.161462 534.945002 347.281741 537.480104 353.6625 537.480104
-z
-" clip-path="url(#p641b35479b)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 356.4 545.727969
+C 362.831175 545.727969 368.999812 543.172836 373.547339 538.625308
+C 378.094867 534.077781 380.65 527.909144 380.65 521.477969
+C 380.65 515.046794 378.094867 508.878157 373.547339 504.330629
+C 368.999812 499.783102 362.831175 497.227969 356.4 497.227969
+C 349.968825 497.227969 343.800188 499.783102 339.252661 504.330629
+C 334.705133 508.878157 332.15 515.046794 332.15 521.477969
+C 332.15 527.909144 334.705133 534.077781 339.252661 538.625308
+C 343.800188 543.172836 349.968825 545.727969 356.4 545.727969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_3">
- <path d="M 151.174417 470.112396
-C 157.555176 470.112396 163.675454 467.577293 168.187332 463.065415
-C 172.69921 458.553538 175.234312 452.433259 175.234312 446.0525
-C 175.234312 439.671741 172.69921 433.551462 168.187332 429.039585
-C 163.675454 424.527707 157.555176 421.992604 151.174417 421.992604
-C 144.793658 421.992604 138.673379 424.527707 134.161501 429.039585
-C 129.649623 433.551462 127.114521 439.671741 127.114521 446.0525
-C 127.114521 452.433259 129.649623 458.553538 134.161501 463.065415
-C 138.673379 467.577293 144.793658 470.112396 151.174417 470.112396
-z
-" clip-path="url(#p641b35479b)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 152.312 477.827969
+C 158.743175 477.827969 164.911812 475.272836 169.459339 470.725308
+C 174.006867 466.177781 176.562 460.009144 176.562 453.577969
+C 176.562 447.146794 174.006867 440.978157 169.459339 436.430629
+C 164.911812 431.883102 158.743175 429.327969 152.312 429.327969
+C 145.880825 429.327969 139.712188 431.883102 135.164661 436.430629
+C 130.617133 440.978157 128.062 447.146794 128.062 453.577969
+C 128.062 460.009144 130.617133 466.177781 135.164661 470.725308
+C 139.712188 475.272836 145.880825 477.827969 152.312 477.827969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_4">
- <path d="M 556.150583 470.112396
-C 562.531342 470.112396 568.651621 467.577293 573.163499 463.065415
-C 577.675377 458.553538 580.210479 452.433259 580.210479 446.0525
-C 580.210479 439.671741 577.675377 433.551462 573.163499 429.039585
-C 568.651621 424.527707 562.531342 421.992604 556.150583 421.992604
-C 549.769824 421.992604 543.649546 424.527707 539.137668 429.039585
-C 534.62579 433.551462 532.090687 439.671741 532.090687 446.0525
-C 532.090687 452.433259 534.62579 458.553538 539.137668 463.065415
-C 543.649546 467.577293 549.769824 470.112396 556.150583 470.112396
-z
-" clip-path="url(#p641b35479b)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 560.488 477.827969
+C 566.919175 477.827969 573.087812 475.272836 577.635339 470.725308
+C 582.182867 466.177781 584.738 460.009144 584.738 453.577969
+C 584.738 447.146794 582.182867 440.978157 577.635339 436.430629
+C 573.087812 431.883102 566.919175 429.327969 560.488 429.327969
+C 554.056825 429.327969 547.888188 431.883102 543.340661 436.430629
+C 538.793133 440.978157 536.238 447.146794 536.238 453.577969
+C 536.238 460.009144 538.793133 466.177781 543.340661 470.725308
+C 547.888188 475.272836 554.056825 477.827969 560.488 477.827969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_5">
- <path d="M 353.6625 79.379688
-C 360.043259 79.379688 366.163538 76.844585 370.675415 72.332707
-C 375.187293 67.820829 377.722396 61.700551 377.722396 55.319792
-C 377.722396 48.939033 375.187293 42.818754 370.675415 38.306876
-C 366.163538 33.794998 360.043259 31.259896 353.6625 31.259896
-C 347.281741 31.259896 341.161462 33.794998 336.649585 38.306876
-C 332.137707 42.818754 329.602604 48.939033 329.602604 55.319792
-C 329.602604 61.700551 332.137707 67.820829 336.649585 72.332707
-C 341.161462 76.844585 347.281741 79.379688 353.6625 79.379688
-z
-" clip-path="url(#p641b35479b)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 356.4 177.127969
+C 362.831175 177.127969 368.999812 174.572836 373.547339 170.025308
+C 378.094867 165.477781 380.65 159.309144 380.65 152.877969
+C 380.65 146.446794 378.094867 140.278157 373.547339 135.730629
+C 368.999812 131.183102 362.831175 128.627969 356.4 128.627969
+C 349.968825 128.627969 343.800188 131.183102 339.252661 135.730629
+C 334.705133 140.278157 332.15 146.446794 332.15 152.877969
+C 332.15 159.309144 334.705133 165.477781 339.252661 170.025308
+C 343.800188 174.572836 349.968825 177.127969 356.4 177.127969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_6">
- <path d="M 151.174417 146.747396
-C 157.555176 146.747396 163.675454 144.212293 168.187332 139.700415
-C 172.69921 135.188538 175.234312 129.068259 175.234312 122.6875
-C 175.234312 116.306741 172.69921 110.186462 168.187332 105.674585
-C 163.675454 101.162707 157.555176 98.627604 151.174417 98.627604
-C 144.793658 98.627604 138.673379 101.162707 134.161501 105.674585
-C 129.649623 110.186462 127.114521 116.306741 127.114521 122.6875
-C 127.114521 129.068259 129.649623 135.188538 134.161501 139.700415
-C 138.673379 144.212293 144.793658 146.747396 151.174417 146.747396
-z
-" clip-path="url(#p641b35479b)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 152.312 245.027969
+C 158.743175 245.027969 164.911812 242.472836 169.459339 237.925308
+C 174.006867 233.377781 176.562 227.209144 176.562 220.777969
+C 176.562 214.346794 174.006867 208.178157 169.459339 203.630629
+C 164.911812 199.083102 158.743175 196.527969 152.312 196.527969
+C 145.880825 196.527969 139.712188 199.083102 135.164661 203.630629
+C 130.617133 208.178157 128.062 214.346794 128.062 220.777969
+C 128.062 227.209144 130.617133 233.377781 135.164661 237.925308
+C 139.712188 242.472836 145.880825 245.027969 152.312 245.027969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_7">
- <path d="M 556.150583 146.747396
-C 562.531342 146.747396 568.651621 144.212293 573.163499 139.700415
-C 577.675377 135.188538 580.210479 129.068259 580.210479 122.6875
-C 580.210479 116.306741 577.675377 110.186462 573.163499 105.674585
-C 568.651621 101.162707 562.531342 98.627604 556.150583 98.627604
-C 549.769824 98.627604 543.649546 101.162707 539.137668 105.674585
-C 534.62579 110.186462 532.090687 116.306741 532.090687 122.6875
-C 532.090687 129.068259 534.62579 135.188538 539.137668 139.700415
-C 543.649546 144.212293 549.769824 146.747396 556.150583 146.747396
-z
-" clip-path="url(#p641b35479b)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 560.488 245.027969
+C 566.919175 245.027969 573.087812 242.472836 577.635339 237.925308
+C 582.182867 233.377781 584.738 227.209144 584.738 220.777969
+C 584.738 214.346794 582.182867 208.178157 577.635339 203.630629
+C 573.087812 199.083102 566.919175 196.527969 560.488 196.527969
+C 554.056825 196.527969 547.888188 199.083102 543.340661 203.630629
+C 538.793133 208.178157 536.238 214.346794 536.238 220.777969
+C 536.238 227.209144 538.793133 233.377781 543.340661 237.925308
+C 547.888188 242.472836 554.056825 245.027969 560.488 245.027969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #4ecdc4; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_8">
- <path d="M 67.34974 308.429896
-C 73.730499 308.429896 79.850777 305.894793 84.362655 301.382915
-C 88.874533 296.871038 91.409635 290.750759 91.409635 284.37
-C 91.409635 277.989241 88.874533 271.868962 84.362655 267.357085
-C 79.850777 262.845207 73.730499 260.310104 67.34974 260.310104
-C 60.968981 260.310104 54.848702 262.845207 50.336824 267.357085
-C 45.824946 271.868962 43.289844 277.989241 43.289844 284.37
-C 43.289844 290.750759 45.824946 296.871038 50.336824 301.382915
-C 54.848702 305.894793 60.968981 308.429896 67.34974 308.429896
-z
-" clip-path="url(#p641b35479b)" style="fill: #ffd93d; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 67.825 361.427969
+C 74.256175 361.427969 80.424812 358.872836 84.972339 354.325308
+C 89.519867 349.777781 92.075 343.609144 92.075 337.177969
+C 92.075 330.746794 89.519867 324.578157 84.972339 320.030629
+C 80.424812 315.483102 74.256175 312.927969 67.825 312.927969
+C 61.393825 312.927969 55.225188 315.483102 50.677661 320.030629
+C 46.130133 324.578157 43.575 330.746794 43.575 337.177969
+C 43.575 343.609144 46.130133 349.777781 50.677661 354.325308
+C 55.225188 358.872836 61.393825 361.427969 67.825 361.427969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #ffd93d; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_9">
- <path d="M 639.97526 308.429896
-C 646.356019 308.429896 652.476298 305.894793 656.988176 301.382915
-C 661.500054 296.871038 664.035156 290.750759 664.035156 284.37
-C 664.035156 277.989241 661.500054 271.868962 656.988176 267.357085
-C 652.476298 262.845207 646.356019 260.310104 639.97526 260.310104
-C 633.594501 260.310104 627.474223 262.845207 622.962345 267.357085
-C 618.450467 271.868962 615.915365 277.989241 615.915365 284.37
-C 615.915365 290.750759 618.450467 296.871038 622.962345 301.382915
-C 627.474223 305.894793 633.594501 308.429896 639.97526 308.429896
-z
-" clip-path="url(#p641b35479b)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 644.975 361.427969
+C 651.406175 361.427969 657.574812 358.872836 662.122339 354.325308
+C 666.669867 349.777781 669.225 343.609144 669.225 337.177969
+C 669.225 330.746794 666.669867 324.578157 662.122339 320.030629
+C 657.574812 315.483102 651.406175 312.927969 644.975 312.927969
+C 638.543825 312.927969 632.375188 315.483102 627.827661 320.030629
+C 623.280133 324.578157 620.725 330.746794 620.725 337.177969
+C 620.725 343.609144 623.280133 349.777781 627.827661 354.325308
+C 632.375188 358.872836 638.543825 361.427969 644.975 361.427969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #ff6b6b; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_10">
- <path d="M 89.003646 61.094167
-L 156.371354 61.094167
-Q 161.183333 61.094167 161.183333 56.282187
-L 161.183333 27.410312
-Q 161.183333 22.598333 156.371354 22.598333
-L 89.003646 22.598333
-Q 84.191667 22.598333 84.191667 27.410312
-L 84.191667 56.282187
-Q 84.191667 61.094167 89.003646 61.094167
-z
-" clip-path="url(#p641b35479b)" style="fill: #9b59b6; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 147.85 80.127969
+L 215.75 80.127969
+Q 220.6 80.127969 220.6 75.277969
+L 220.6 46.177969
+Q 220.6 41.327969 215.75 41.327969
+L 147.85 41.327969
+Q 143 41.327969 143 46.177969
+L 143 75.277969
+Q 143 80.127969 147.85 80.127969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #9b59b6; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="patch_11">
- <path d="M 319.978646 32.222292
-L 387.346354 32.222292
-Q 392.158333 32.222292 392.158333 27.410312
-L 392.158333 -1.461563
-Q 392.158333 -6.273542 387.346354 -6.273542
-L 319.978646 -6.273542
-Q 315.166667 -6.273542 315.166667 -1.461563
-L 315.166667 27.410312
-Q 315.166667 32.222292 319.978646 32.222292
-z
-" clip-path="url(#p641b35479b)" style="fill: #9b59b6; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
+ <path d="M 497.05 80.127969
+L 564.95 80.127969
+Q 569.8 80.127969 569.8 75.277969
+L 569.8 46.177969
+Q 569.8 41.327969 564.95 41.327969
+L 497.05 41.327969
+Q 492.2 41.327969 492.2 46.177969
+L 492.2 75.277969
+Q 492.2 80.127969 497.05 80.127969
+z
+" clip-path="url(#pac2ac733d1)" style="fill: #9b59b6; stroke: #000000; stroke-width: 2; stroke-linejoin: miter"/>
</g>
<g id="text_1">
<!-- WireGuard Full Mesh Network with Roaming Clients -->
- <g transform="translate(149.406875 547.104062) scale(0.14 -0.14)">
+ <g transform="translate(166.734062 17.077969) scale(0.13 -0.13)">
<defs>
<path id="DejaVuSans-Bold-57" d="M 191 4666
L 1344 4666
@@ -866,7 +866,7 @@ z
</g>
<g id="text_2">
<!-- f0 -->
- <g transform="translate(348.008594 516.179583) scale(0.1 -0.1)">
+ <g transform="translate(350.746094 524.237344) scale(0.1 -0.1)">
<defs>
<path id="DejaVuSans-Bold-66" d="M 2841 4863
L 2841 4128
@@ -917,7 +917,7 @@ z
</g>
<g id="text_3">
<!-- f1 -->
- <g transform="translate(145.52051 448.811875) scale(0.1 -0.1)">
+ <g transform="translate(146.658094 456.337344) scale(0.1 -0.1)">
<defs>
<path id="DejaVuSans-Bold-31" d="M 750 831
L 1813 831
@@ -940,7 +940,7 @@ z
</g>
<g id="text_4">
<!-- f2 -->
- <g transform="translate(550.496677 448.811875) scale(0.1 -0.1)">
+ <g transform="translate(554.834094 456.337344) scale(0.1 -0.1)">
<defs>
<path id="DejaVuSans-Bold-32" d="M 1844 884
L 3897 884
@@ -971,28 +971,28 @@ z
</g>
<g id="text_5">
<!-- r0 -->
- <g transform="translate(347.717969 58.079167) scale(0.1 -0.1)">
+ <g transform="translate(350.455469 155.637344) scale(0.1 -0.1)">
<use xlink:href="#DejaVuSans-Bold-72"/>
<use xlink:href="#DejaVuSans-Bold-30" transform="translate(49.316406 0)"/>
</g>
</g>
<g id="text_6">
<!-- r1 -->
- <g transform="translate(145.229885 125.446875) scale(0.1 -0.1)">
+ <g transform="translate(146.367469 223.537344) scale(0.1 -0.1)">
<use xlink:href="#DejaVuSans-Bold-72"/>
<use xlink:href="#DejaVuSans-Bold-31" transform="translate(49.316406 0)"/>
</g>
</g>
<g id="text_7">
<!-- r2 -->
- <g transform="translate(550.206052 125.446875) scale(0.1 -0.1)">
+ <g transform="translate(554.543469 223.537344) scale(0.1 -0.1)">
<use xlink:href="#DejaVuSans-Bold-72"/>
<use xlink:href="#DejaVuSans-Bold-32" transform="translate(49.316406 0)"/>
</g>
</g>
<g id="text_8">
<!-- blowfish -->
- <g transform="translate(43.577865 287.129375) scale(0.1 -0.1)">
+ <g transform="translate(44.053125 339.937344) scale(0.1 -0.1)">
<defs>
<path id="DejaVuSans-Bold-62" d="M 2400 722
Q 2759 722 2948 984
@@ -1033,7 +1033,7 @@ z
</g>
<g id="text_9">
<!-- fishfinger -->
- <g transform="translate(612.666667 287.090312) scale(0.1 -0.1)">
+ <g transform="translate(617.666406 339.898281) scale(0.1 -0.1)">
<use xlink:href="#DejaVuSans-Bold-66"/>
<use xlink:href="#DejaVuSans-Bold-69" transform="translate(43.505859 0)"/>
<use xlink:href="#DejaVuSans-Bold-73" transform="translate(77.783203 0)"/>
@@ -1048,7 +1048,7 @@ z
</g>
<g id="text_10">
<!-- earth -->
- <g style="fill: #ffffff" transform="translate(109.025078 44.329687) scale(0.09 -0.09)">
+ <g style="fill: #ffffff" transform="translate(168.137578 63.211406) scale(0.09 -0.09)">
<use xlink:href="#DejaVuSans-Bold-65"/>
<use xlink:href="#DejaVuSans-Bold-61" transform="translate(67.822266 0)"/>
<use xlink:href="#DejaVuSans-Bold-72" transform="translate(135.302734 0)"/>
@@ -1058,7 +1058,7 @@ z
</g>
<g id="text_11">
<!-- pixel7pro -->
- <g style="fill: #ffffff" transform="translate(329.738672 15.457813) scale(0.09 -0.09)">
+ <g style="fill: #ffffff" transform="translate(507.076172 63.211406) scale(0.09 -0.09)">
<defs>
<path id="DejaVuSans-Bold-70" d="M 1656 506
L 1656 -1331
@@ -1125,29 +1125,29 @@ z
</g>
<g id="legend_1">
<g id="patch_12">
- <path d="M 171.5025 54.030937
-L 535.8225 54.030937
-Q 537.6225 54.030937 537.6225 52.230937
-L 537.6225 13.5
-Q 537.6225 11.7 535.8225 11.7
-L 171.5025 11.7
-Q 169.7025 11.7 169.7025 13.5
-L 169.7025 52.230937
-Q 169.7025 54.030937 171.5025 54.030937
-z
-" style="fill: #ffffff; opacity: 0.8; stroke: #cccccc; stroke-linejoin: miter"/>
+ <path d="M 19.784 579.557969
+L 182.70775 579.557969
+Q 184.30775 579.557969 184.30775 577.957969
+L 184.30775 508.302969
+Q 184.30775 506.702969 182.70775 506.702969
+L 19.784 506.702969
+Q 18.184 506.702969 18.184 508.302969
+L 18.184 577.957969
+Q 18.184 579.557969 19.784 579.557969
+z
+" style="fill: #ffffff; opacity: 0.98; stroke: #000000; stroke-linejoin: miter"/>
</g>
<g id="patch_13">
- <path d="M 173.3025 22.138594
-L 191.3025 22.138594
-L 191.3025 15.838594
-L 173.3025 15.838594
+ <path d="M 21.384 515.981719
+L 37.384 515.981719
+L 37.384 510.381719
+L 21.384 510.381719
z
" style="fill: #ff6b6b; stroke: #000000; stroke-linejoin: miter"/>
</g>
<g id="text_12">
<!-- FreeBSD (f0-f2) -->
- <g transform="translate(198.5025 22.138594) scale(0.09 -0.09)">
+ <g transform="translate(43.784 515.981719) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-46" d="M 628 4666
L 3309 4666
@@ -1405,16 +1405,16 @@ z
</g>
</g>
<g id="patch_14">
- <path d="M 173.3025 35.348906
-L 191.3025 35.348906
-L 191.3025 29.048906
-L 173.3025 29.048906
+ <path d="M 21.384 527.724219
+L 37.384 527.724219
+L 37.384 522.124219
+L 21.384 522.124219
z
" style="fill: #4ecdc4; stroke: #000000; stroke-linejoin: miter"/>
</g>
<g id="text_13">
<!-- Rocky Linux (r0-r2) -->
- <g transform="translate(198.5025 35.348906) scale(0.09 -0.09)">
+ <g transform="translate(43.784 527.724219) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-52" d="M 2841 2188
Q 3044 2119 3236 1894
@@ -1618,16 +1618,16 @@ z
</g>
</g>
<g id="patch_15">
- <path d="M 173.3025 48.559219
-L 191.3025 48.559219
-L 191.3025 42.259219
-L 173.3025 42.259219
+ <path d="M 21.384 539.466719
+L 37.384 539.466719
+L 37.384 533.866719
+L 21.384 533.866719
z
" style="fill: #ffd93d; stroke: #000000; stroke-linejoin: miter"/>
</g>
<g id="text_14">
<!-- OpenBSD (blowfish, fishfinger) -->
- <g transform="translate(198.5025 48.559219) scale(0.09 -0.09)">
+ <g transform="translate(43.784 539.466719) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-4f" d="M 2522 4238
Q 1834 4238 1429 3725
@@ -1852,16 +1852,16 @@ z
</g>
</g>
<g id="patch_16">
- <path d="M 354.333281 22.138594
-L 372.333281 22.138594
-L 372.333281 15.838594
-L 354.333281 15.838594
+ <path d="M 21.384 551.209219
+L 37.384 551.209219
+L 37.384 545.609219
+L 21.384 545.609219
z
" style="fill: #9b59b6; stroke: #000000; stroke-linejoin: miter"/>
</g>
<g id="text_15">
<!-- Roaming Clients (earth, pixel7pro) -->
- <g transform="translate(379.533281 22.138594) scale(0.09 -0.09)">
+ <g transform="translate(43.784 551.209219) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-61" d="M 2194 1759
Q 1497 1759 1228 1600
@@ -2016,14 +2016,14 @@ z
</g>
</g>
<g id="line2d_33">
- <path d="M 354.333281 32.198906
-L 363.333281 32.198906
-L 372.333281 32.198906
+ <path d="M 21.384 560.151719
+L 29.384 560.151719
+L 37.384 560.151719
" style="fill: none; stroke: #808080; stroke-linecap: square"/>
</g>
<g id="text_16">
<!-- Full Mesh VPN -->
- <g transform="translate(379.533281 35.348906) scale(0.09 -0.09)">
+ <g transform="translate(43.784 562.951719) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-4d" d="M 628 4666
L 1569 4666
@@ -2102,14 +2102,14 @@ z
</g>
</g>
<g id="line2d_34">
- <path d="M 354.333281 45.409219
-L 363.333281 45.409219
-L 372.333281 45.409219
+ <path d="M 21.384 571.894219
+L 29.384 571.894219
+L 37.384 571.894219
" style="fill: none; stroke-dasharray: 5.55,2.4; stroke-dashoffset: 0; stroke: #4169e1; stroke-width: 1.5"/>
</g>
<g id="text_17">
<!-- Client → Gateway VPN -->
- <g transform="translate(379.533281 48.559219) scale(0.09 -0.09)">
+ <g transform="translate(43.784 574.694219) scale(0.08 -0.08)">
<defs>
<path id="DejaVuSans-2192" d="M 5050 2147
L 5050 1866
@@ -2176,8 +2176,8 @@ z
</g>
</g>
<defs>
- <clipPath id="p641b35479b">
- <rect x="7.2" y="7.2" width="692.925" height="554.34"/>
+ <clipPath id="pac2ac733d1">
+ <rect x="7.2" y="7.377969" width="698.4" height="582"/>
</clipPath>
</defs>
</svg>
diff --git a/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh.svg b/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh.svg
deleted file mode 100644
index f2f4f359..00000000
--- a/gemfeed/f3s-kubernetes-with-freebsd-part-5/wireguard-full-mesh.svg
+++ /dev/null
@@ -1,772 +0,0 @@
-<?xml version="1.0" encoding="utf-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns:xlink="http://www.w3.org/1999/xlink" width="720pt" height="576pt" viewBox="0 0 720 576" xmlns="http://www.w3.org/2000/svg" version="1.1">
- <metadata>
- <rdf:RDF xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
- <cc:Work>
- <dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage"/>
- <dc:date>2025-05-04T06:41:23.234045</dc:date>
- <dc:format>image/svg+xml</dc:format>
- <dc:creator>
- <cc:Agent>
- <dc:title>Matplotlib v3.6.3, https://matplotlib.org/</dc:title>
- </cc:Agent>
- </dc:creator>
- </cc:Work>
- </rdf:RDF>
- </metadata>
- <defs>
- <style type="text/css">*{stroke-linejoin: round; stroke-linecap: butt}</style>
- </defs>
- <g id="figure_1">
- <g id="patch_1">
- <path d="M 0 576
-L 720 576
-L 720 0
-L 0 0
-z
-" style="fill: #ffffff"/>
- </g>
- <g id="axes_1">
- <g id="LineCollection_1">
- <path d="M 657.520661 288
-L 570.378873 119.696901
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 359.999987 49.983471
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 149.621127 119.696901
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 62.479339 288.000021
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 149.621109 456.303085
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 657.520661 288
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 359.999987 49.983471
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 149.621127 119.696901
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 62.479339 288.000021
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 149.621109 456.303085
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 570.378873 119.696901
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 359.999987 49.983471
-L 149.621127 119.696901
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 359.999987 49.983471
-L 62.479339 288.000021
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 359.999987 49.983471
-L 149.621109 456.303085
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 359.999987 49.983471
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 359.999987 49.983471
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621127 119.696901
-L 62.479339 288.000021
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621127 119.696901
-L 149.621109 456.303085
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621127 119.696901
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621127 119.696901
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 62.479339 288.000021
-L 149.621109 456.303085
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 62.479339 288.000021
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 62.479339 288.000021
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621109 456.303085
-L 360.000004 526.016529
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 149.621109 456.303085
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- <path d="M 360.000004 526.016529
-L 570.378838 456.303127
-" clip-path="url(#p24c674e8fe)" style="fill: none; stroke: #808080"/>
- </g>
- <g id="PathCollection_1">
- <defs>
- <path id="m1f11223b72" d="M 0 22.36068
-C 5.930122 22.36068 11.618159 20.004617 15.811388 15.811388
-C 20.004617 11.618159 22.36068 5.930122 22.36068 0
-C 22.36068 -5.930122 20.004617 -11.618159 15.811388 -15.811388
-C 11.618159 -20.004617 5.930122 -22.36068 0 -22.36068
-C -5.930122 -22.36068 -11.618159 -20.004617 -15.811388 -15.811388
-C -20.004617 -11.618159 -22.36068 -5.930122 -22.36068 0
-C -22.36068 5.930122 -20.004617 11.618159 -15.811388 15.811388
-C -11.618159 20.004617 -5.930122 22.36068 0 22.36068
-z
-" style="stroke: #add8e6"/>
- </defs>
- <g clip-path="url(#p24c674e8fe)">
- <use xlink:href="#m1f11223b72" x="657.520661" y="288" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="570.378873" y="119.696901" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="359.999987" y="49.983471" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="149.621127" y="119.696901" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="62.479339" y="288.000021" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="149.621109" y="456.303085" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="360.000004" y="526.016529" style="fill: #add8e6; stroke: #add8e6"/>
- <use xlink:href="#m1f11223b72" x="570.378838" y="456.303127" style="fill: #add8e6; stroke: #add8e6"/>
- </g>
- </g>
- <g id="text_1">
- <g clip-path="url(#p24c674e8fe)">
- <!-- f0 -->
- <g transform="translate(651.590974 291.31125) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-66" d="M 2375 4863
-L 2375 4384
-L 1825 4384
-Q 1516 4384 1395 4259
-Q 1275 4134 1275 3809
-L 1275 3500
-L 2222 3500
-L 2222 3053
-L 1275 3053
-L 1275 0
-L 697 0
-L 697 3053
-L 147 3053
-L 147 3500
-L 697 3500
-L 697 3744
-Q 697 4328 969 4595
-Q 1241 4863 1831 4863
-L 2375 4863
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-30" d="M 2034 4250
-Q 1547 4250 1301 3770
-Q 1056 3291 1056 2328
-Q 1056 1369 1301 889
-Q 1547 409 2034 409
-Q 2525 409 2770 889
-Q 3016 1369 3016 2328
-Q 3016 3291 2770 3770
-Q 2525 4250 2034 4250
-z
-M 2034 4750
-Q 2819 4750 3233 4129
-Q 3647 3509 3647 2328
-Q 3647 1150 3233 529
-Q 2819 -91 2034 -91
-Q 1250 -91 836 529
-Q 422 1150 422 2328
-Q 422 3509 836 4129
-Q 1250 4750 2034 4750
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-66"/>
- <use xlink:href="#DejaVuSans-30" x="35.205078"/>
- </g>
- </g>
- </g>
- <g id="text_2">
- <g clip-path="url(#p24c674e8fe)">
- <!-- f1 -->
- <g transform="translate(564.449186 123.008151) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-31" d="M 794 531
-L 1825 531
-L 1825 4091
-L 703 3866
-L 703 4441
-L 1819 4666
-L 2450 4666
-L 2450 531
-L 3481 531
-L 3481 0
-L 794 0
-L 794 531
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-66"/>
- <use xlink:href="#DejaVuSans-31" x="35.205078"/>
- </g>
- </g>
- </g>
- <g id="text_3">
- <g clip-path="url(#p24c674e8fe)">
- <!-- f2 -->
- <g transform="translate(354.070299 53.294721) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-32" d="M 1228 531
-L 3431 531
-L 3431 0
-L 469 0
-L 469 531
-Q 828 903 1448 1529
-Q 2069 2156 2228 2338
-Q 2531 2678 2651 2914
-Q 2772 3150 2772 3378
-Q 2772 3750 2511 3984
-Q 2250 4219 1831 4219
-Q 1534 4219 1204 4116
-Q 875 4013 500 3803
-L 500 4441
-Q 881 4594 1212 4672
-Q 1544 4750 1819 4750
-Q 2544 4750 2975 4387
-Q 3406 4025 3406 3419
-Q 3406 3131 3298 2873
-Q 3191 2616 2906 2266
-Q 2828 2175 2409 1742
-Q 1991 1309 1228 531
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-66"/>
- <use xlink:href="#DejaVuSans-32" x="35.205078"/>
- </g>
- </g>
- </g>
- <g id="text_4">
- <g clip-path="url(#p24c674e8fe)">
- <!-- r0 -->
- <g transform="translate(143.337064 123.008151) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-72" d="M 2631 2963
-Q 2534 3019 2420 3045
-Q 2306 3072 2169 3072
-Q 1681 3072 1420 2755
-Q 1159 2438 1159 1844
-L 1159 0
-L 581 0
-L 581 3500
-L 1159 3500
-L 1159 2956
-Q 1341 3275 1631 3429
-Q 1922 3584 2338 3584
-Q 2397 3584 2469 3576
-Q 2541 3569 2628 3553
-L 2631 2963
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-72"/>
- <use xlink:href="#DejaVuSans-30" x="41.113281"/>
- </g>
- </g>
- </g>
- <g id="text_5">
- <g clip-path="url(#p24c674e8fe)">
- <!-- r1 -->
- <g transform="translate(56.195276 291.311271) scale(0.12 -0.12)">
- <use xlink:href="#DejaVuSans-72"/>
- <use xlink:href="#DejaVuSans-31" x="41.113281"/>
- </g>
- </g>
- </g>
- <g id="text_6">
- <g clip-path="url(#p24c674e8fe)">
- <!-- r2 -->
- <g transform="translate(143.337046 459.614335) scale(0.12 -0.12)">
- <use xlink:href="#DejaVuSans-72"/>
- <use xlink:href="#DejaVuSans-32" x="41.113281"/>
- </g>
- </g>
- </g>
- <g id="text_7">
- <g clip-path="url(#p24c674e8fe)">
- <!-- blowfish -->
- <g transform="translate(335.238754 529.327779) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-62" d="M 3116 1747
-Q 3116 2381 2855 2742
-Q 2594 3103 2138 3103
-Q 1681 3103 1420 2742
-Q 1159 2381 1159 1747
-Q 1159 1113 1420 752
-Q 1681 391 2138 391
-Q 2594 391 2855 752
-Q 3116 1113 3116 1747
-z
-M 1159 2969
-Q 1341 3281 1617 3432
-Q 1894 3584 2278 3584
-Q 2916 3584 3314 3078
-Q 3713 2572 3713 1747
-Q 3713 922 3314 415
-Q 2916 -91 2278 -91
-Q 1894 -91 1617 61
-Q 1341 213 1159 525
-L 1159 0
-L 581 0
-L 581 4863
-L 1159 4863
-L 1159 2969
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-6c" d="M 603 4863
-L 1178 4863
-L 1178 0
-L 603 0
-L 603 4863
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-6f" d="M 1959 3097
-Q 1497 3097 1228 2736
-Q 959 2375 959 1747
-Q 959 1119 1226 758
-Q 1494 397 1959 397
-Q 2419 397 2687 759
-Q 2956 1122 2956 1747
-Q 2956 2369 2687 2733
-Q 2419 3097 1959 3097
-z
-M 1959 3584
-Q 2709 3584 3137 3096
-Q 3566 2609 3566 1747
-Q 3566 888 3137 398
-Q 2709 -91 1959 -91
-Q 1206 -91 779 398
-Q 353 888 353 1747
-Q 353 2609 779 3096
-Q 1206 3584 1959 3584
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-77" d="M 269 3500
-L 844 3500
-L 1563 769
-L 2278 3500
-L 2956 3500
-L 3675 769
-L 4391 3500
-L 4966 3500
-L 4050 0
-L 3372 0
-L 2619 2869
-L 1863 0
-L 1184 0
-L 269 3500
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-69" d="M 603 3500
-L 1178 3500
-L 1178 0
-L 603 0
-L 603 3500
-z
-M 603 4863
-L 1178 4863
-L 1178 4134
-L 603 4134
-L 603 4863
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-73" d="M 2834 3397
-L 2834 2853
-Q 2591 2978 2328 3040
-Q 2066 3103 1784 3103
-Q 1356 3103 1142 2972
-Q 928 2841 928 2578
-Q 928 2378 1081 2264
-Q 1234 2150 1697 2047
-L 1894 2003
-Q 2506 1872 2764 1633
-Q 3022 1394 3022 966
-Q 3022 478 2636 193
-Q 2250 -91 1575 -91
-Q 1294 -91 989 -36
-Q 684 19 347 128
-L 347 722
-Q 666 556 975 473
-Q 1284 391 1588 391
-Q 1994 391 2212 530
-Q 2431 669 2431 922
-Q 2431 1156 2273 1281
-Q 2116 1406 1581 1522
-L 1381 1569
-Q 847 1681 609 1914
-Q 372 2147 372 2553
-Q 372 3047 722 3315
-Q 1072 3584 1716 3584
-Q 2034 3584 2315 3537
-Q 2597 3491 2834 3397
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-68" d="M 3513 2113
-L 3513 0
-L 2938 0
-L 2938 2094
-Q 2938 2591 2744 2837
-Q 2550 3084 2163 3084
-Q 1697 3084 1428 2787
-Q 1159 2491 1159 1978
-L 1159 0
-L 581 0
-L 581 4863
-L 1159 4863
-L 1159 2956
-Q 1366 3272 1645 3428
-Q 1925 3584 2291 3584
-Q 2894 3584 3203 3211
-Q 3513 2838 3513 2113
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-62"/>
- <use xlink:href="#DejaVuSans-6c" x="63.476562"/>
- <use xlink:href="#DejaVuSans-6f" x="91.259766"/>
- <use xlink:href="#DejaVuSans-77" x="152.441406"/>
- <use xlink:href="#DejaVuSans-66" x="234.228516"/>
- <use xlink:href="#DejaVuSans-69" x="269.433594"/>
- <use xlink:href="#DejaVuSans-73" x="297.216797"/>
- <use xlink:href="#DejaVuSans-68" x="349.316406"/>
- </g>
- </g>
- </g>
- <g id="text_8">
- <g clip-path="url(#p24c674e8fe)">
- <!-- fishfinger -->
- <g transform="translate(542.122588 459.614377) scale(0.12 -0.12)">
- <defs>
- <path id="DejaVuSans-6e" d="M 3513 2113
-L 3513 0
-L 2938 0
-L 2938 2094
-Q 2938 2591 2744 2837
-Q 2550 3084 2163 3084
-Q 1697 3084 1428 2787
-Q 1159 2491 1159 1978
-L 1159 0
-L 581 0
-L 581 3500
-L 1159 3500
-L 1159 2956
-Q 1366 3272 1645 3428
-Q 1925 3584 2291 3584
-Q 2894 3584 3203 3211
-Q 3513 2838 3513 2113
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-67" d="M 2906 1791
-Q 2906 2416 2648 2759
-Q 2391 3103 1925 3103
-Q 1463 3103 1205 2759
-Q 947 2416 947 1791
-Q 947 1169 1205 825
-Q 1463 481 1925 481
-Q 2391 481 2648 825
-Q 2906 1169 2906 1791
-z
-M 3481 434
-Q 3481 -459 3084 -895
-Q 2688 -1331 1869 -1331
-Q 1566 -1331 1297 -1286
-Q 1028 -1241 775 -1147
-L 775 -588
-Q 1028 -725 1275 -790
-Q 1522 -856 1778 -856
-Q 2344 -856 2625 -561
-Q 2906 -266 2906 331
-L 2906 616
-Q 2728 306 2450 153
-Q 2172 0 1784 0
-Q 1141 0 747 490
-Q 353 981 353 1791
-Q 353 2603 747 3093
-Q 1141 3584 1784 3584
-Q 2172 3584 2450 3431
-Q 2728 3278 2906 2969
-L 2906 3500
-L 3481 3500
-L 3481 434
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-65" d="M 3597 1894
-L 3597 1613
-L 953 1613
-Q 991 1019 1311 708
-Q 1631 397 2203 397
-Q 2534 397 2845 478
-Q 3156 559 3463 722
-L 3463 178
-Q 3153 47 2828 -22
-Q 2503 -91 2169 -91
-Q 1331 -91 842 396
-Q 353 884 353 1716
-Q 353 2575 817 3079
-Q 1281 3584 2069 3584
-Q 2775 3584 3186 3129
-Q 3597 2675 3597 1894
-z
-M 3022 2063
-Q 3016 2534 2758 2815
-Q 2500 3097 2075 3097
-Q 1594 3097 1305 2825
-Q 1016 2553 972 2059
-L 3022 2063
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-66"/>
- <use xlink:href="#DejaVuSans-69" x="35.205078"/>
- <use xlink:href="#DejaVuSans-73" x="62.988281"/>
- <use xlink:href="#DejaVuSans-68" x="115.087891"/>
- <use xlink:href="#DejaVuSans-66" x="178.466797"/>
- <use xlink:href="#DejaVuSans-69" x="213.671875"/>
- <use xlink:href="#DejaVuSans-6e" x="241.455078"/>
- <use xlink:href="#DejaVuSans-67" x="304.833984"/>
- <use xlink:href="#DejaVuSans-65" x="368.310547"/>
- <use xlink:href="#DejaVuSans-72" x="429.833984"/>
- </g>
- </g>
- </g>
- <g id="text_9">
- <!-- Wireguard Full-Mesh Network -->
- <g style="fill: #333333" transform="translate(242.625 -6) scale(0.16 -0.16)">
- <defs>
- <path id="DejaVuSans-57" d="M 213 4666
-L 850 4666
-L 1831 722
-L 2809 4666
-L 3519 4666
-L 4500 722
-L 5478 4666
-L 6119 4666
-L 4947 0
-L 4153 0
-L 3169 4050
-L 2175 0
-L 1381 0
-L 213 4666
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-75" d="M 544 1381
-L 544 3500
-L 1119 3500
-L 1119 1403
-Q 1119 906 1312 657
-Q 1506 409 1894 409
-Q 2359 409 2629 706
-Q 2900 1003 2900 1516
-L 2900 3500
-L 3475 3500
-L 3475 0
-L 2900 0
-L 2900 538
-Q 2691 219 2414 64
-Q 2138 -91 1772 -91
-Q 1169 -91 856 284
-Q 544 659 544 1381
-z
-M 1991 3584
-L 1991 3584
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-61" d="M 2194 1759
-Q 1497 1759 1228 1600
-Q 959 1441 959 1056
-Q 959 750 1161 570
-Q 1363 391 1709 391
-Q 2188 391 2477 730
-Q 2766 1069 2766 1631
-L 2766 1759
-L 2194 1759
-z
-M 3341 1997
-L 3341 0
-L 2766 0
-L 2766 531
-Q 2569 213 2275 61
-Q 1981 -91 1556 -91
-Q 1019 -91 701 211
-Q 384 513 384 1019
-Q 384 1609 779 1909
-Q 1175 2209 1959 2209
-L 2766 2209
-L 2766 2266
-Q 2766 2663 2505 2880
-Q 2244 3097 1772 3097
-Q 1472 3097 1187 3025
-Q 903 2953 641 2809
-L 641 3341
-Q 956 3463 1253 3523
-Q 1550 3584 1831 3584
-Q 2591 3584 2966 3190
-Q 3341 2797 3341 1997
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-64" d="M 2906 2969
-L 2906 4863
-L 3481 4863
-L 3481 0
-L 2906 0
-L 2906 525
-Q 2725 213 2448 61
-Q 2172 -91 1784 -91
-Q 1150 -91 751 415
-Q 353 922 353 1747
-Q 353 2572 751 3078
-Q 1150 3584 1784 3584
-Q 2172 3584 2448 3432
-Q 2725 3281 2906 2969
-z
-M 947 1747
-Q 947 1113 1208 752
-Q 1469 391 1925 391
-Q 2381 391 2643 752
-Q 2906 1113 2906 1747
-Q 2906 2381 2643 2742
-Q 2381 3103 1925 3103
-Q 1469 3103 1208 2742
-Q 947 2381 947 1747
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-20" transform="scale(0.015625)"/>
- <path id="DejaVuSans-46" d="M 628 4666
-L 3309 4666
-L 3309 4134
-L 1259 4134
-L 1259 2759
-L 3109 2759
-L 3109 2228
-L 1259 2228
-L 1259 0
-L 628 0
-L 628 4666
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-2d" d="M 313 2009
-L 1997 2009
-L 1997 1497
-L 313 1497
-L 313 2009
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-4d" d="M 628 4666
-L 1569 4666
-L 2759 1491
-L 3956 4666
-L 4897 4666
-L 4897 0
-L 4281 0
-L 4281 4097
-L 3078 897
-L 2444 897
-L 1241 4097
-L 1241 0
-L 628 0
-L 628 4666
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-4e" d="M 628 4666
-L 1478 4666
-L 3547 763
-L 3547 4666
-L 4159 4666
-L 4159 0
-L 3309 0
-L 1241 3903
-L 1241 0
-L 628 0
-L 628 4666
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-74" d="M 1172 4494
-L 1172 3500
-L 2356 3500
-L 2356 3053
-L 1172 3053
-L 1172 1153
-Q 1172 725 1289 603
-Q 1406 481 1766 481
-L 2356 481
-L 2356 0
-L 1766 0
-Q 1100 0 847 248
-Q 594 497 594 1153
-L 594 3053
-L 172 3053
-L 172 3500
-L 594 3500
-L 594 4494
-L 1172 4494
-z
-" transform="scale(0.015625)"/>
- <path id="DejaVuSans-6b" d="M 581 4863
-L 1159 4863
-L 1159 1991
-L 2875 3500
-L 3609 3500
-L 1753 1863
-L 3688 0
-L 2938 0
-L 1159 1709
-L 1159 0
-L 581 0
-L 581 4863
-z
-" transform="scale(0.015625)"/>
- </defs>
- <use xlink:href="#DejaVuSans-57"/>
- <use xlink:href="#DejaVuSans-69" x="96.626953"/>
- <use xlink:href="#DejaVuSans-72" x="124.410156"/>
- <use xlink:href="#DejaVuSans-65" x="163.273438"/>
- <use xlink:href="#DejaVuSans-67" x="224.796875"/>
- <use xlink:href="#DejaVuSans-75" x="288.273438"/>
- <use xlink:href="#DejaVuSans-61" x="351.652344"/>
- <use xlink:href="#DejaVuSans-72" x="412.931641"/>
- <use xlink:href="#DejaVuSans-64" x="452.294922"/>
- <use xlink:href="#DejaVuSans-20" x="515.771484"/>
- <use xlink:href="#DejaVuSans-46" x="547.558594"/>
- <use xlink:href="#DejaVuSans-75" x="599.578125"/>
- <use xlink:href="#DejaVuSans-6c" x="662.957031"/>
- <use xlink:href="#DejaVuSans-6c" x="690.740234"/>
- <use xlink:href="#DejaVuSans-2d" x="718.523438"/>
- <use xlink:href="#DejaVuSans-4d" x="754.607422"/>
- <use xlink:href="#DejaVuSans-65" x="840.886719"/>
- <use xlink:href="#DejaVuSans-73" x="902.410156"/>
- <use xlink:href="#DejaVuSans-68" x="954.509766"/>
- <use xlink:href="#DejaVuSans-20" x="1017.888672"/>
- <use xlink:href="#DejaVuSans-4e" x="1049.675781"/>
- <use xlink:href="#DejaVuSans-65" x="1124.480469"/>
- <use xlink:href="#DejaVuSans-74" x="1186.003906"/>
- <use xlink:href="#DejaVuSans-77" x="1225.212891"/>
- <use xlink:href="#DejaVuSans-6f" x="1307"/>
- <use xlink:href="#DejaVuSans-72" x="1368.181641"/>
- <use xlink:href="#DejaVuSans-6b" x="1409.294922"/>
- </g>
- </g>
- </g>
- </g>
- <defs>
- <clipPath id="p24c674e8fe">
- <rect x="0" y="0" width="720" height="576"/>
- </clipPath>
- </defs>
-</svg>
generated by cgit v1.2.3 (git 2.25.1) at 2026-06-06 13:09:25 +0000