3 ms·
TIL the complexity of VPN is still higher than my desire to self host. I've run OpenVPN in very complex configurations across multiple datacenters for companies
by asim 3y ago
TIL the complexity of VPN is still higher than my desire to self host. I've run OpenVPN in very complex configurations across multiple datacenters for companies, I've worked on distributed systems and networking tech for decades but honestly all of this is still very much in the, too painful to setup, state. I'm playing around with Tailscale Funnel now and the tsnet package in Go, that's pretty nice. Embedding headscale or running it separately seems like a huge effort but I like that I can programmatically build things on Tailscale.
More and more I'm just thinking stuff like what Signal did with a proxy server makes sense. Run a bunch of proxies, hide the complexity. Maybe default it in the browser. Maybe I'm old, who knows.
- PLG88 3y agoIf you like tsnet, you will probably like the open source project I work on called OpenZiti. Its an open source overlay network that allows you to embed zero trust networking and SDN into almost anything - https://github.com/openziti https://github.com/openziti. This includes tunnelers for all popular OSs as well as SDKs for many languages incl. Go, Java, Python, C, C#, Node, ect ect.
- asim 3y agoNice, thanks for sharing! I'm sort of interested in what the tech could enable if it's invisibly deployed and used within an app.
- rubatuga 3y agoIf you care about simplicity, you should try our managed public IP address service called Hoppy. We give you clean IPv4 /32 and IPv6 /56 blocks, and don't block ports allowing you to even host a mail server. https://hoppy.network https://hoppy.network
- KomoD 3y agoClean meaning? And 1TB for $8/mo is pretty bad imo, bad speeds too Also not clear where its located