pivpn VS tailscale

PiVPN for classic VPN software https://pivpn.io - Wireguard would be my choice

Linux retropie 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l GNU/Linux

Wondering what people are using these days to get a VPN (Wireguard?) up and running easily. Is Wireguard itself simple enough that one can just ... do this? I'm thinking of something like PiVPN which does appear to still exist but I'm unsure of how up-to-date it is. Specifically, I like terminal commands just fine, but would prefer not to have to manually configure a basic VPN (internet gateway) and its associated profiles/certificates.

A real simple way is pivpn in a vm. Super easy to set up and manage users. https://github.com/pivpn/pivpn

They're easily set up via the guided PiVPN installation script. Should work on everything that's Debian-based, not just on Rasbian running on a Pi.

under Features in [1]:

* Doesn't need to be a Raspberry Pi™, It runs on any x86_64 system

[1] https://pivpn.io/

I had 2 old laptops sitting around, both 10 years old. I turned both into a home server. Installed Ubuntu Server, set up Docker, and now I run all my containers remotely. With Tailscale, I can securely connect to it like it's on the same network. This way, my MacBook doesn't have to run MongoDB, Redis, or RabbitMQ anymore. That alone freed up a lot of memory. I can even run other services like HomeAssistant, MailHog, Immich, etc.

Then I wanted to add Tailscle which besides being a "best in class VPN" for the homelabbers, allows you to add k8s services directly into your tailnet. What does it mean? The Tailscale operator allows you to access your k8s applications only when you are logged into your private network (tailnet), with the usage of your domain for ended with ts.net. You can configure it in two ways on the resource side, with ingress or with service annotation.

here's the GitHub issue tracking the problem:

https://github.com/tailscale/tailscale/issues/3363

We actually have that nowadays... the config file support to tailscaled, as Irbe mentioned on the bug Jan 2024: https://github.com/tailscale/tailscale/issues/1412#issuecomm...

I dunno if the CIA would trust them but I like Amcrest cameras

https://amcrest.com/

because they have a wide range of different price points and capabilities. Use these with software like

https://zoneminder.com/

which you could run on a cheap Linux box. For secure access use

https://tailscale.com/

Vertical scaling this language also gets into painful territory quite often, I’ve had to workaround this problem before but never with a thing that felt like this: https://github.com/tailscale/tailscale/blob/main/syncs/shard...

Hmm, yes, I think you’re right. Tailscale does handle the connection here, not Wireguard.

I’ve digged into it a bit and I believe it first connects over a relay, then the devices try to find a more optimal route. So for LAN, they would exchange their local IPs and try to connect over those. If they are indeed on the same LAN, they connect directly: https://tailscale.com/kb/1257/connection-types

This is not without issues, however: https://github.com/tailscale/tailscale/issues/7206

Tailscale is a tunneling platform built on open-source code. DevZero and other companies leverage a handful of Tailscale’s source components in their own development environments. Why? Because being open-source means that Tailscale’s software/code is much easier to understand and manipulate, more cost-efficient, and more transparent. Tailscale takes pride in this.

Just put tailscale [1] on all of your devices and forget about the problem. It may be technically a vpn but it's much easier to use.

[1] https://tailscale.com/