98
Recommendation: Tailscale VPN
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 06 Jul 2023
98 points (94.5% liked)
Selfhosted
39677 readers
210 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 1 year ago
MODERATORS
It's not self-hosted, I refuse to use anything that relies on any third party
Check out Headscale, pretty stable on my end
Does using headscale reduce the available functionality in any way? I read Tailscale's AMAZING article on NAT traversal and was wondering if that was impacted by moving to headscale in any way. Does headscale replace DERP too?
Headscale does have a built-in DERP server, and you can run standalone instances using code from tailscale (there are a bunch of docker images you can find on docker hub, or you can build one yourself), which you then have to include in Headscale's config. I've done this for a while, but I was running into connectivity issues when on the go using a mobile connection, so I've been falling back on Tailscale's instances for now. I should try again sometime.
Could it be that your headscale instance is only available over IPv6? Sometimes that's disabled on mobile networks.
I don't know the technicals that well, but I can see relays working if I run
tailscale status. You don't get some enterprise/business features like access control, but I can be wrong.You could checkout a very similar product, ZeroTier (Open Source Community Edition) assuming your use case is non-commercial.
... if you're willing to use an older release, you could potentially do whatever you want as the software uses a BSL license with a change date fallback license of Apache 2.0.