4 ms·
> assuming I’m not interested yet in a commercial “Zero Trust Network” solution that maybe tunnels any TCP/UDP packets through a commercial reverse proxy becaus
by jarym 4y ago
> assuming I’m not interested yet in a commercial “Zero Trust Network” solution that maybe tunnels any TCP/UDP packets through a commercial reverse proxy because the packets are not end-to-end encrypted.
This isn’t (always) true. Some solutions are E2E encrypted.
- zikduruqe 4y agoor stand up Headscale yourself. https://github.com/juanfont/headscale https://github.com/juanfont/headscale
- jacooper 4y agoSet up*
- adrianmonk 4y ago"Stand up" is jargon for creating an instance of a service and bringing it online. Among "stand"'s many meanings, it can be a transitive verb meaning to put something in a standing or upright position. For example, my electric toothbrush has a flat bottom, so I can lay it down on its side or stand it up on its end. So, basically "stand up" is a lot like "erect" as in "erect a fence along the property line".
- therein 4y agoBeen using it for at least 6-8 months. Works well everywhere, last I checked didn't work on iOS devices due to the Tailscale client not caring about the custom preferences loaded. Not a problem for me, the only Apple devices I have are not iOS but I'd imagine a dealbreaker for some.
- t0astbread 4y ago> Some solutions are E2E encrypted. Which ones do you mean? With Tailscale, the data channel runs over WireGuard, so it's encrypted between clients but the keys are exchanged over the control plane without end-to-end authentication, as far as I know. ZeroTier I don't know much about. Does it have some kind of end-to-end key? Nebula (from Slack) uses certificates, so it does make devices on the live network effectively trustless.