Recommendation for vpn setup reddit / selfhosted ---------------------------------------------------------------------- soulless_ape · 2023-12-26 03:21 What setup do you guys recommend for setting up a VPN to access systems at home? Is there anything FOSSthat is relatively easy to setup and troubleshoot? ---------------------------------------------------------------------- kirblarzkb · 2023-12-26 03:46 I run OPNSense for my main firewall/router. It natively runs my WireGuard to get on my home network. Found easier to do this route vs an lxc/vm. ---------------------------------------------------------------------- jbarr107 · 2023-12-26 04:08 Probably the most popular solution is simply using Tailscale. While not open source, you can self host Headscale. I've found it to be simple to set up and rock solid. Beyond that, others will have to answer. ---------------------------------------------------------------------- andyj9 · 2023-12-26 04:23 Zerotier is great. ---------------------------------------------------------------------- Eren-yeager · 2023-12-26 04:24 Pivpn + wireguard. Easy to control n not rate limited. Tailscale if u don't want overhead n is rate limited in case u plan to stream from home network or upload photos. ---------------------------------------------------------------------- mahinthjoe · 2023-12-26 04:42 https://www.cloudflarewarp.com/ ---------------------------------------------------------------------- Longjumping-Mix-5848 · 2023-12-26 05:26 If you have a direct connection no rate limit ---------------------------------------------------------------------- frozen-sky · 2023-12-26 05:52 Lets connect vpn is getting mature. Apps for all devices. Backend uses openvpn and wireguard as possible vpn tech. All fully opensource https://www.letsconnect-vpn.org ---------------------------------------------------------------------- nebajoth · 2023-12-26 06:40 Tailscale is life changing ---------------------------------------------------------------------- TheCaptain53 · 2023-12-26 07:10 It depends on how paranoid you are and what Internet you have. This is also on the assumption that you want a basic VPN without advanced SSO or anything like that. If you are on the paranoid side, people tend to avoid closed source/hosted as much as possible. So here, I'd say you broadly have two options; 1. If you are allocated a whole public IP address, then you can port forward to an installation of Wireguard. I've got it installed directly on my server to avoid any Docker woes. If you are allocated a whole public IP address but it's dynamic (changes regularly), then you'll need to use a Dynamic DNS service. Alternatively, if you have your own domain, you could add a record for your VPN and configure a script to connect to your DNS provider and change the record whenever your IP changes. 2. If you have a CGNAT connection, then this changes matters. Unfortunately, you cannot port forward with these types of connections. In these cases, your best option is to configure a Wireguard tunnel from your home network to a VPS (cloud hosted server), then configure a second tunnel from the remote host to connect to it, then the VPS will just trunk that traffic over. Or, better yet, use that VPS to install Headscale. It's an open source implementation of the Tailscale coordination server. It requires the ability to port forward, which will be possible with your VPS. If you aren't feeling so paranoid, then I'd elect for Tailscale. It's a super easy, no-nonsense VPN that works really well. It also works over CGNAT connections without any issues. ---------------------------------------------------------------------- housepanther2000 · 2023-12-26 07:47 I use WireGuard as my solution. There are plenty of good tutorials out there. I have a WireGuard tunnel between my cloud VPS and my home server so I can do some self-hosting. ---------------------------------------------------------------------- ButterscotchFar1629 · 2023-12-26 08:01 Tailscale ---------------------------------------------------------------------- Agile_Ad_2073 · 2023-12-26 08:44 Don’t even bother. Just use Tailscale. ---------------------------------------------------------------------- tsapi · 2023-12-26 08:53 If you have a linux router, then wireguard is a one way street. You install in in the linux router (command line), use some dynamic dns service in case you don't have a static ip and you are safe and ready. Wireguard is lightweight, actively developed, easy to setup and maintain. ---------------------------------------------------------------------- Impossible-Check-684 · 2023-12-26 08:58 I run OpenVPN alongside Pi-hole, it would run on its own as well: https://cloudtechtips.com/linux/ubuntu/installing-openvpn-with-pivpn- on-ubuntu-running-pi-hole/394/ ---------------------------------------------------------------------- Jonteponte71 · 2023-12-26 09:43 This looks like outgoing VPN though? I did not know cloudflare was offering that as well. ---------------------------------------------------------------------- Haliphone · 2023-12-26 09:55 Are there free VPS's that I could install headscale on? That mught be my next magical adventure 😂 ---------------------------------------------------------------------- tigrayt2 · 2023-12-26 11:12 What about NetMaker. It's for sure more than just a VPN server, but it works perfectly fine. It gives you the capability of creating your mesh, which could be very handy if you are running multiple homelabs and VPSes. You can create a nice mesh with a fine-grained accessibility configuration, a nice dns solution, and great performance and speed. I'm still running cersion 17 though, not much I can tell about the newer versions. ---------------------------------------------------------------------- sk1nT7 · 2023-12-26 11:27 wg-easy ---------------------------------------------------------------------- TheCaptain53 · 2023-12-26 11:29 Unfortunately I can't help there, although hopefully other people have some suggestions. ---------------------------------------------------------------------- auron_py · 2023-12-26 11:53 Take a look at Oracle Cloud, they have a forever free tier but with ARM cores, I don't know if it works with headscale. But man, a VPS is like $5 a month, it is nothing. I've got my Tailscale exit node there. ---------------------------------------------------------------------- TheCaptain53 · 2023-12-26 12:20 I've just looked at the Headscale image on Docker Hub and they've got arm64 images with the latest tags, so I'm assuming that you probably can. I might give it a go and see what happens. ---------------------------------------------------------------------- gargravarr2112 · 2023-12-26 12:45 Tailscale. It's black magic. ---------------------------------------------------------------------- Square_Lawfulness_33 · 2023-12-26 13:07 wg-easy is a wireguard vpn and frontend ---------------------------------------------------------------------- Haliphone · 2023-12-26 14:40 Free to figure it out, then happy to pay. I can be a bit of a slow learner and sometimes try to do things I don't really need to do. ---------------------------------------------------------------------- ReleaseTThePanic · 2023-12-26 15:39 CGNAT would not be a problem with IPv6. Worth checking if every place one plans on connecting from has IPv6 routing. I think LTE uses IPv6 as a default so mobile access is assured. ---------------------------------------------------------------------- jbarr107 · 2023-12-26 16:17 My general policy is this: -If you are providing YOU or a limited group exclusive access to your specific devices or the full infrastructure, use Tailscale. -If you are providing unrestricted public access to a service like a website, use a Cloudflare Tunnel. -If you are providing restricted access requiring authentication to a service for you or a limited group, use a Cloudflare Tunnel and Application to provide secure access. ---------------------------------------------------------------------- Transcend005 · 2023-12-26 16:43 If You are living in country with firewall, than wireguard, openvpn, socks is not an option. You have to obsfurscate Your encrypted traffik. Simple things may become difficult because of location. ---------------------------------------------------------------------- soulless_ape · 2023-12-26 19:01 It would be just so i can reach my own network at home. Nothing fancy. I'm concerned more about security. ---------------------------------------------------------------------- soulless_ape · 2023-12-26 19:01 Thanks! I will look into it. ---------------------------------------------------------------------- soulless_ape · 2023-12-26 19:02 Thanks, I research it. ---------------------------------------------------------------------- soulless_ape · 2023-12-26 19:03 Hey, thanks for the info. I'll check it out. ---------------------------------------------------------------------- soulless_ape · 2023-12-26 19:04 Not behind any repressive firewall, cgnat ISP most likely. I'll check out your suggestions. ---------------------------------------------------------------------- inagy · 2023-12-26 19:14 I have a dynamic IP address and most Android clients can't reresolve VPN server's DNS name when the connection breaks down, so I've landed on OpenVPN which able to handle this. (Neither Wireguard, nor IPsec- Ike2 was able to handle this on Android) ---------------------------------------------------------------------- vluhdz · 2023-12-27 04:51 I'm just running a wireguard docker container, very low effort and works great: https://github.com/linuxserver/docker-wireguard ---------------------------------------------------------------------- sinamics · 2023-12-27 19:52 Give ztnet ( zerotier ) a try: [https://github.com/sinamics/ztnet](https://github.com/sinamics/ztnet) Should be fairly easy to get started. ---------------------------------------------------------------------- sinamics · 2023-12-27 19:54 its awesome ---------------------------------------------------------------------- soulless_ape · 2023-12-29 18:36 Thanks! ---------------------------------------------------------------------- soulless_ape · 2023-12-29 18:38 Will check it out. I'm going to setup one or two cameras at home. Looking into if an nvr is needed or if home assistant will suffice. I just need a safe way to reach the cameras at home.