tailscale VS OpenVPN

It's likely just `tailscale serve https / `.

https://github.com/tailscale/tailscale/blob/main/ipn/serve.g...

And they also support direct embedding:

https://tailscale.dev/blog/embedded-funnel

I think this is built on the wireguard-go + gvisor mashup, that allows you to do this with just Wireguard:

https://github.com/WireGuard/wireguard-go/tree/master/tun/ne...

One of my favorite applications of this is this little tool that turns Wireguard VPNs into SOCKS5 proxies (which you can selectively enable in your browser)

https://pkg.go.dev/github.com/octeep/wireproxy

I agree, it's a feature that I find sorely lacking in my tailnet.

These are the relevant Github issues to follow, hopefully they address these someday:

https://github.com/tailscale/tailscale/issues/465

tailscale runs a continuous netcheck to an unroutable IP (203.0.113.1:12345:UDP) [1] for whatever reason. This triggered Hetzner's ghetto-ass DDOS protection, thinking my server was compromised or something. They sent me an email saying my server was compromised and I had 24hrs to remedy it.

I responded to the email and filled out this attestation form declaring that my server was not under attack and it was a false positive etc. They still null routed my server and refused to turn it back on, and their arrogant support told me there was no way I was in control of this server etc.

Anyway, took my box offline during a peak user day, migrated to AWS and never looked back.

Don't do anything of importance on Hetzner. No wonder they only get people running pirated plex boxes.

[1] https://github.com/tailscale/tailscale/blob/94304819263b0553...

Fond memories of using DDNS on old Netgear routers at home in the aughts and port forwarding services with some rudimentary firewall rules and tcpwrappers to try and lock down access.

Now I use a combination of Tailscale[1] for private services only to me and Tailscale Funnels[2], and Cloudflare Tunnels[3] for public service exposure.

This accomplishes the same thing I was doing with DDNS and my ISP IP, but in a much more secure and stable manner.

1. https://tailscale.com/

2. https://tailscale.com/kb/1223/tailscale-funnel/

3. https://developers.cloudflare.com/cloudflare-one/connections...

Tailscale: Seems to have quite good NAT support and seems to do DNS resolution. Clients for most relevant platform - a well rounded package. But I find their plans to be prohibitive. Only 20 devices on the free plan. The first paid tier is 5 devices per 1 user, so 5 devices for me paying? A head scratcher. There is an open source control plane https://github.com/juanfont/headscale but given the clients are not open source it feels a bit scary to rely on. My knowledge of wireguard is not good enough, but I am also wondering if it is really meant for a mesh setup?

Ha van mindket modem mogott fixen szamitogep (akar egy olcso raspberry pi) akkor felrakod a tailscale-t, engedelyezed exit node-kent es kesz vagy. Gepenkent kb 5 perc melo

OpenVPN is hiring! https://openvpn.net/

C++ Developer in the United States. Full-time| Fully remote| Flexible work schedules

Link to look at vacancy details and apply:

How you connect to your modem will depend on the device you are using, but for windows laptops as an example you download the OpenVPN program and input your modem details there, much like you would any other vpn service. I think there would be some guides on youtube. https://openvpn.net/

It is likely an issue with the 'cipher' options, if any, that are in your ".opvn" file. This is telling you that the opvn setting is not finding a matching cipher it is allowed to use. The fix per the message would be to add the Servers cipher to your options. https://github.com/OpenVPN/openvpn-gui/issues/381 https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/cipher-negotiation.rst

OpenVPN is a VPN client that I used primarily for work. We used VPN to connect to the dev server and we are using VPN. I also sometimes used that to open websites that got blocked in Indonesia like Reddit.

I connect all the servers with secure OpenVPN private network. And block unused ports anywhere with ufw.

Ensure remote access is by VPN only like the site-to-site with Ubiquitis gear, WireGuard or OpenVPN and there could be a paid option I just don't know.

In OpenVPN server config you just go with port 443 and use proto set to TCP. The example server.conf is here. Check lines 32 and 36

SSH + vnc in conjunction with Openvpn or WireGuard

Not being facetious, but solution #1 is to consider upgrading your router to one that does have a native VPN server, such as the TP-Link Archer AX55. It's the easiest and most convenient solution. Solution #2 would be to install OpenVPN on a dedicated machine (e.g., a Raspberry Pi) and port forward to it. You mentioned having a NAS; it likely has a VPN server package available. Here's one for Synology.