Nate Brown

upstream ssl support would be awesome. I would like to enable a local server dealing in cleartext that proxies to upstreams using ssl.

:wave: @davidhuie-dd thanks for the PR! This looks like a good idea to me but I'd like to modify it a bit. `rules.skip` seems more natural, can you also update...

:wave: @IxDay thanks for the PR, can you do the CLA for us?

You can have multiple CAs but they'd all need to be in the same file, or if you inline them, the actual contents of the CA in config. ``` pki...

One maybe helpful concrete example would be: Employees use SSH to access production systems via a bastion. You could run nebula on all the laptops/desktops the employees use. Those certs...

This is a fairly complex situation! I would assume there is some race/bug with the `network.target` here. I'm not very familiar with chromeos but maybe try a later target? `multi-user.target`...

Is the macos box on the same physical network as the k8 instances? If not, do the k8 machines have access to the internet? If they do, have you tried...

Is it the nebula buffers or the nginx buffers that are having trouble?

I use `ss -numpile`, it will output a line starting with `skmem` that shows the memory stats specific to a socket instead of a global protocol stat. Another thing to...

Usually we see `rmem` being the culprit, you can generally make your `listen.write_buffer` lower than `listen.read_buffer`. You also don't need to adjust sysctl for these changes since nebula uses a...