Wireguard VPN or Zerotrust to public selfhosted services which is better? [HELP] [DISCUTION] reddit / selfhosted ---------------------------------------------------------------------- roycorderov 路 2023-10-30 01:28 hi folks I have several self hosted services and wordpress pages that I publish on the internet the problem is that I have no public ip so I have always used a linode vps with wireguard as vpn and then a reverse proxi as ngnx to address the ports of my services and websites... The problem I have always seen is that no matter what I do the connections are always slow... and I think it is because the use of the same ngnx and wireguard; because they are several steps and could creates a high latency... now I would like to use a zerotrust services as "cloudflare" or "twingate" and I would like someone who has gone through the same thing tell me if it is worth making that change... I believe that using a zerotrust would'nt have to use the wireguard, and maibe the nginx to address my services but i could avoid that latency and even having more security... please tell me your opinions and if someone already knows cloudflare's zerotrust or twingate please tell me your opinion of both 馃槈. ---------------------------------------------------------------------- rhuneai 路 2023-10-30 02:10 Is the issue while accessing the services publicly, or when managing things privately? Wireguard wouldn't be in use publicly, so I assume you mean the private backend. What operations are you trying to do that are not fast enough (file copy, restarting nodes etc)? ---------------------------------------------------------------------- zfa 路 2023-10-30 02:20 nginx and wireguard should introduce next to no latency if done correctly. check your wg interface mtu in the first instance. ---------------------------------------------------------------------- chaplin2 路 2023-10-30 02:23 Why nginx? Wireguard to linode and access services by their IP. Each service will connect and have a Wireguard Ip. ---------------------------------------------------------------------- roycorderov 路 2023-10-30 03:20 >like to get one of my landing page make it in wordpress... currently I have them all down because I'm working on my server ---------------------------------------------------------------------- roycorderov 路 2023-10-30 03:26 because on my porxmox server where my services are hosted in lxc containers or vm always have the same ip of the container or vm and only differ by the port 192.168.1.5:1234 for example and in wireguard I can choose ips but not ports, the other way would be to make a container or vm for each individual service to have different ip's but this would increase the load on the kernel and on the server. ---------------------------------------------------------------------- roycorderov 路 2023-10-30 03:28 mmm im not familiar with mtu is... but i will check it out as wel.. thanks ---------------------------------------------------------------------- tomistruth 路 2023-10-30 10:36 I suspect that your linode vps is the culprit. Try another host. It could be that linose is oversold and really slow. ---------------------------------------------------------------------- roycorderov 路 2023-10-30 14:38 mmm you think so? ok I'll check it out too. ---------------------------------------------------------------------- roycorderov 路 2023-10-30 15:21 and which vps do you recommend me to looking for or use?