3 ms·
Nowadays I question the necessity of vpn overlay networks. Why not just serve QUIC/HTTP3/Iroh over the internet directly in your application? And use oidc/clien
by preisschild 4mo ago
Nowadays I question the necessity of vpn overlay networks. Why not just serve QUIC/HTTP3/Iroh over the internet directly in your application? And use oidc/client cert for authn/authz
- ElectricalUnion 4mo agoI believe the main usecases for this is not requiring changing code, not requiring adding a reverse proxy in front of code I can't change, and "OSI"ish protocols (as in, not really TCP protocols - Remote Database Access, Oracle Net Services/Java Message Queues/X.500, LDAP/smb/ncacn_np). Those days, rather that actual "vpn overlay", I use Tailscale myself mostly for the Tailscale Funnel - a somewhat stable, yet free arbitrary DNS and free reverse proxy termination of incoming data for anonymous users.
- preisschild 3mo ago> Remote Database Access Postgres also has TLS + oauth2 support > rather that actual "vpn overlay", I use Tailscale myself I actually already had tailscale in mind when talking about "vpn overlays" :D
- dfish 3mo agoYes, you can also do it. VPN is just one of those applications to be honest. Think of it as relaying packets over iroh.