tailscale VS algo

I agree, it's a feature that I find sorely lacking in my tailnet.

These are the relevant Github issues to follow, hopefully they address these someday:

https://github.com/tailscale/tailscale/issues/465

tailscale runs a continuous netcheck to an unroutable IP (203.0.113.1:12345:UDP) [1] for whatever reason. This triggered Hetzner's ghetto-ass DDOS protection, thinking my server was compromised or something. They sent me an email saying my server was compromised and I had 24hrs to remedy it.

I responded to the email and filled out this attestation form declaring that my server was not under attack and it was a false positive etc. They still null routed my server and refused to turn it back on, and their arrogant support told me there was no way I was in control of this server etc.

Anyway, took my box offline during a peak user day, migrated to AWS and never looked back.

Don't do anything of importance on Hetzner. No wonder they only get people running pirated plex boxes.

[1] https://github.com/tailscale/tailscale/blob/94304819263b0553...

Fond memories of using DDNS on old Netgear routers at home in the aughts and port forwarding services with some rudimentary firewall rules and tcpwrappers to try and lock down access.

Now I use a combination of Tailscale[1] for private services only to me and Tailscale Funnels[2], and Cloudflare Tunnels[3] for public service exposure.

This accomplishes the same thing I was doing with DDNS and my ISP IP, but in a much more secure and stable manner.

1. https://tailscale.com/

2. https://tailscale.com/kb/1223/tailscale-funnel/

3. https://developers.cloudflare.com/cloudflare-one/connections...

Tailscale: Seems to have quite good NAT support and seems to do DNS resolution. Clients for most relevant platform - a well rounded package. But I find their plans to be prohibitive. Only 20 devices on the free plan. The first paid tier is 5 devices per 1 user, so 5 devices for me paying? A head scratcher. There is an open source control plane https://github.com/juanfont/headscale but given the clients are not open source it feels a bit scary to rely on. My knowledge of wireguard is not good enough, but I am also wondering if it is really meant for a mesh setup?

Ha van mindket modem mogott fixen szamitogep (akar egy olcso raspberry pi) akkor felrakod a tailscale-t, engedelyezed exit node-kent es kesz vagy. Gepenkent kb 5 perc melo

Check out the command line args for Auto1111, it talks about a gradio setup that can be accessed remotely. There's a time limit on gradio links though, I think. You could also set up a vpn that will allow you to access your PC remotely, then run A1111 with the --listen command and access it that way. I've done this with an Algo VPN on Azure and a Wireguard client for Windows for Android, but any VPN that lets you access your PC remotely would work.

One way you could try to get around is building your own VPN service, like this: https://github.com/trailofbits/algo/blob/master/README.md

If you want a quick way to setup wiregaurd on your cloud provider of choice there's this easy tool by the security company trailofbits https://github.com/trailofbits/algo

they specifically try to remove extraneous features and make it easy to use, I'm surprised more people don't use it

Isn't the problem that the exit IPs will be flagged / blocked, meaning at best you'll get a ton of captchas etc.? I have set up personal Wireguard VPNs with Algo[1] before on DO, and while they work fine, they cause a lot of friction for that reason.

1: https://github.com/trailofbits/algo

To make matters slightly more complicated, I am using algo which is a DIY wireguard VPN for all my devices (including my validator machine). So all traffic likely needs to get routed to/from the VPN machine running in the cloud (though I might be wrong about this).

Algo project still works well. Very quickly launch a WireGuard VPN to several popular cloud providers, or any Linux instance you already have access to, including your rPi.

https://github.com/trailofbits/algo

I set up an algo VPN server at Hetzner, then installed AdGuard Home on it.