Any concept of routing via nodes? about nebula HOT 3 CLOSED

Okay, I wanted this too, so I spent the day and have a working patch. Def experimental, but I'll link this issue once I make it a proper PR.

Plan is to leave it behind a config option that you explicitly need to enable. By default you won't be able to route traffic via nebula even if the certificate has a valid set of subnets defined. Will document and make clear that this is not as good as running nebula on all hosts, but I understand why folks might want it.

from nebula.

Or, hot off the presses, given issues like https://seclists.org/oss-sec/2019/q4/122 - perhaps we should consider never allowing routing of traffic destined for non-nebula IPs through nebula.

from nebula.

Or give the ability to switch it on and off as some people like to route traffic through VPN overlays.

At the moment I'm just using an ebgp routeserver and FRR but would be good to be able to negate having to use BGP at all and have routing built in.

Cheers!
Jon.

from nebula.