Netmaker VS network-manager-wireguard

My plan is to set up an EC2 instance and host a VPN, considering options like Netmaker, OpenVPN, or Tailscale. The goal is to connect these devices to the VPN, enabling SSH access from any connected node. This method seems cost-effective(Considering I want to use 100s of devices and potentially 1000s) and straightforward, requiring a simple setup with a sudo apt command on the Raspberry Pi.

I'm wondering if there are any alternative approaches to achieve this. Is something like Netmaker or Tailscale feasible enough? If you have any suggestions, I'd greatly appreciate it.

https://github.com/gravitl/netmaker

Honorable mention:

SuperHighway84 - more of a Usenet-inspired darknet, but I love the concept + the author's personal website:

https://github.com/mrusme/superhighway84

Exciting news to share! Netmaker has officially embraced open source. This momentous decision was unveiled at the Open Source Summit in Europe when the pull request successfully merged, transitioning their server from the SSPL to the widely recognized Apache License 2.0.

While we've encountered some challenges and worked with vendors like Cisco to find solutions, I'm curious about recommendations for SD-WAN providers that are well-suited for SASE users. This includes not only Zscaler but also other options like Netmaker, Palo Alto, Cloudflare, Cisco, and Forcepoint.

Now, my main question is how I can link my DDNS host endpoint with my EC2 instances, allowing only my home network to access them. I've come across a variety of suggestions, such as Netmaker, OpenVPN, Tailscale etc. but I'm curious to hear your opinions on these solutions.

HN is somehow always timely. Currently, these folks expect me to sign a CLA for a one-byte change to their README: https://github.com/gravitl/netmaker/pull/2516

git clone https://github.com/max-moser/network-manager-wireguard

I used to use a neat little plugin - network-manager-wireguard to make my wireguard connections using the GUI under VPN connections. It's dead simple - create the profile and it shows up in the tool bar as a toggle switch. Unfortunately it breaks in network-manager v1.36 and above, so I've locked it to v1.34 . I make different wireguard connections daily so it's inconvenient to have to go into nmtui to make the connection if I go that route...

NetworkManager supports WireGuard natively. I wouldn't use the networkmanager-wireguard package, which is the VPN plugin (from https://github.com/max-moser/network-manager-wireguard). I would uninstall that.

For network manager: https://github.com/max-moser/network-manager-wireguard and if you use gnome, VPN status will be shown in the top bar.

git clone https://github.com/max-moser/network-manager-wireguard

On Arch I installed this package to get a GUI for WireGuard in the Gnome Control Panel. It doesn't look like anyone has packaged it for Ubuntu, but you could install it from source.