2 ms·
I’ve been doing this for many years now—happiness is not keeping one or more beasts of machines in my backpack—and I still do this over SSH tunnels (maybe I sho
by binkHN 5y ago
I’ve been doing this for many years now—happiness is not keeping one or more beasts of machines in my backpack—and I still do this over SSH tunnels (maybe I should finally migrate to the WireGuard hotness).
- smackeyacky 5y agoI was doing a lot of work with SSH tunnels, but it seems Tailscale is an easy way into WireGuard. For now I just have one node running on my office setup to access everything there and it seems to work pretty well from home. More convenient than mapping ports anyway. Although...I don't quite grok how it might be more secure than something like certificate based SSH, seems like the Tailscale attack surface might be bigger even though you can go back and close off the firewall stuff that allows SSH to work. Would seem that instead of concentrating on breaking your (probably obscure) public IP address / port combo, an attacker would simply go to Tailscale and attack that instead.
- hoherd 5y agoIt sounds like you and I have a similar setup. I recently set up WireGuard using the linuxserver/wireguard image, and although it was really easy (took ~5 minutes to grok and get running) and is useful for my phone to get pihole dns from my home network, I don't think I get any benefits when using wireguard on my laptop vs just using sshuttle, which doesn't require any extra software at home.