3 ms·
The use of VPNs to mitigate iffy security in self-hosted stuff is common but comes with its own problems, simultaneously it makes your self-hosted services hard
by fulafel 4y ago
The use of VPNs to mitigate iffy security in self-hosted stuff is common but comes with its own problems, simultaneously it makes your self-hosted services harder to access (or impossible from some contextx), and it hurts security by making your system more complex (harder to understand & manage & monitor). They're also seemingly going out of fashion as zero-trust/beyondcorp/identity-aware proxies gain mindshare. Of course if you (along with friends and family) are all-in on a overlay network like tailscale it can be a different story.
- jhugo 4y agoActually, I find that a simple wireguard tunnel giving boring old IP routing to my home network is a far simpler setup than every device having its own opaque tunnel back to its vendor which I have to use a vendor-specific method of connecting to. Tailscale is also more complex, though a nice product. So far I haven't encountered any context where I couldn't connect to my wireguard tunnel, but YMMV.