if anyone has set up a self-hosted virtual folded clos network (wireguard, vxlan, etc.) i'd be fascinated to hear how you did it. i'm trying to set one up for high availability and low maintenance but i keep running into things like wireguard not supporting multipath routing or vxlan needing port forwarding if one end is behind NAT.
i'm trying to achieve these goals:
redundant routing plane (so a VPS going down doesn't take down the whole network)
vanilla clients for mobile devices (i'm not a software dev)
clients include laptops, physical servers, phones, and containers/VMs behind a variety of NAT and firewall configurations out of my control
routers are VPSes, globally distributed
self-hosted
minimal configuration effort for new clients
wireguard doesn't enjoy anycast/multicast/redundancy very much. vxlan needs port forwarding apparently, although i haven't exhausted my search there yet. tailscale isn't self-hosted, and headscale has only experimental support for HA (and there's a bug in the tailscale iOS app that prevents working with headscale). ipsec and openvpn don't exactly have glowing reputations, but they're probably my next lines of investigation unless i can get something else working without manual firewall configuration.
