4 ms·
How about the old solution of devices connecting to an access VPN running on a nearby AWS VPS? I have my private network right now. As a plus, devices can make
by aborsy 4y ago
How about the old solution of devices connecting to an access VPN running on a nearby AWS VPS?
I have my private network right now. As a plus, devices can make direct connection when they are in restrictive corporate networks (allowing only 443/tcp). Less third parties involved. Seems more secure for personal use.
Sure, it’s not a mesh network, but that doesn’t matter if VPS and devices are in the same region.
But I get that mesh VPN products can be valuable to small businesses: ease of use, ACLs, SSO, central management.
- smackeyacky 4y agoThere is nothing wrong with a direct VPN, but Tailscale makes them look hard to configure and you don't get the magical DNS stuff they provide.
- dvzk 4y agoCustom peer to peer networks over Wireguard are theoretically more secure. A list of additional potential adversaries who can remotely access your Tailscale network without client manipulation: - Tailscale’s coordination server - Tailscale’s cloud provider - anyone who compromises the coordination server - SSO provider you have chosen - SSO’s cloud provider - anyone who compromises the SSO provider