Okay I understand the Tailscale hype now reddit / selfhosted ---------------------------------------------------------------------- Nestramutat- · 2023-12-28 06:27 I always used just vanilla wireguard , so I felt no reason to look at Tailscale. Until my girlfriend's phone needed LAN access while away, so I figured I'd give it a go and see what all the hype is about. My god is it ever well designed. I mean holy shit, I didn't have to read any guides or anything to get going. Adding routes just makes sense. The ACL is clear and easy to understand. DNS actually worked on the first try????? I take back all the times I recommended straight Wireguard in the past. Tailscale is the way to go ---------------------------------------------------------------------- LegitimateCopy7 · 2023-12-28 06:49 Tailscale is great but do realize that you’re giving up some autonomy by relying on an external service. there’s never a thing in this world that does not come with tradeoffs. don’t hype things up and don’t get hyped by others. if people are saying that something is the greatest ever, start asking questions. ---------------------------------------------------------------------- newked · 2023-12-28 08:00 https://github.com/juanfont/headscale ---------------------------------------------------------------------- ilikethebuddha · 2023-12-28 08:09 Ya I jumped in last week for setting up something that couldnt port forward and I don't have anything on DNS either. I don't plan on staying long term. Still kinda freaky for me ---------------------------------------------------------------------- thehoffau · 2023-12-28 08:29 Headacale and my own DERP on a linode is the best thing I have setup in a long time. All the tailscale is cool and all on my own resources... ---------------------------------------------------------------------- ElevenNotes · 2023-12-28 08:39 Tailscale is **a** way to go, but not **the** way to go. Different problems require different tools. Tailscale is very easy to setup and use, but in order for it to be easy, you rely a lot on external services, just like with any other cloud provided software. Yes you can use Headscale, but if you use that, you are not the target audience for Tailscale anymore. Tailscale is a so called low skill solution that anyone can use without prior knowledge or understanding of the underlying technologies. It's a good start into VPN's but saying it is the best solution out there and you will never recommend Wireguard ever again is pure emotions and fan boy talk and should never be encouraged. It is a tool, nothing more, nothing less. It's great that you like it, but just because you do, does not mean everyone does. I hope you understand that? ---------------------------------------------------------------------- newked · 2023-12-28 08:57 Embedded in headscale ---------------------------------------------------------------------- ErraticLitmus · 2023-12-28 09:11 So my interpretation is.... Tailscale is a good secure solution for getting others access to your LAN? If it's just yourself, wireguard is fine. ---------------------------------------------------------------------- tomistruth · 2023-12-28 09:32 How stable is it, does it finally have a webgui? ---------------------------------------------------------------------- thehoffau · 2023-12-28 09:44 Been rock solid. There are a few gui but it's not a simple setup ---------------------------------------------------------------------- lilolalu · 2023-12-28 10:14 Netbird https://github.com/netbirdio/netbird ---------------------------------------------------------------------- lilolalu · 2023-12-28 10:15 Or use a selfhosted mesh VPN like nebula, netbird, tinc etc. https://github.com/netbirdio/netbird ---------------------------------------------------------------------- housepanther2000 · 2023-12-28 10:22 Yeah, hype usually means someone has an angle. I personally prefer straight WireGuard or even Slack Nebula. I like having direct control, even if more work is involved to achieve the end result ---------------------------------------------------------------------- angelflames1337 · 2023-12-28 11:54 Ive been checking out headscale guide and wondering, if i want derp, do i need to setup ssl cert for the headscale webfront, or can i use reverse proxy for it? ---------------------------------------------------------------------- faxattack · 2023-12-28 11:59 Thats why you always try several alternatives so you can switch easily of one goes away 😀 Luckily there are lots of similar ones for quick drop in replacement. ---------------------------------------------------------------------- KoppleForce · 2023-12-28 12:21 These guerilla marketing posts are getting old. Everyone here already knows about this. Maybe try Facebook or something. ---------------------------------------------------------------------- OtherUse1685 · 2023-12-28 12:24 Netbird is good for what it is, but in my use case it can't seem to punch through normal NAT and always uses relay, which is slow... ---------------------------------------------------------------------- lilolalu · 2023-12-28 12:26 It uses the same mesh mechanisms and wireguard underneath as Tailscale. It's only easier to install and better suited for self- hosting. ---------------------------------------------------------------------- tenekev · 2023-12-28 12:44 I don't think this is the case. Most hype is not organic, that's true. But Tailscale is undeniably a great product that hits all the important points. The user experience is great. The documentation is REALLY good. And there is a generous free tier. It's the perfect recipe for organic hype. All of this is true for now and it can turn to shit in the following years but right now it's genuine satisfaction that drives the hype. ---------------------------------------------------------------------- housepanther2000 · 2023-12-28 12:45 I never said that Tailscale is not a good product though. ---------------------------------------------------------------------- gargravarr2112 · 2023-12-28 12:47 Tailscale is black magic. I don't understand exactly how it works but it's amazing. I maintain an OpenVPN instance as a backup and am looking into Headscale, but the core product just. Freaking. WORKS. ---------------------------------------------------------------------- OtherUse1685 · 2023-12-28 12:48 I tried to self host it, I know. Oddly [Netmaker](https://www.netmaker.io/) doesn't have this issue. Tailscale is also good. Only Netbird has this weird relay thingy, I really like Netbird but this prevents me from using it fully. ---------------------------------------------------------------------- git · 2023-12-28 12:52 Literally just started using Tailscale with Headscale over Christmas for an obscure use case that my usual, "Just use real WireGuard," response didn't apply to — then, in awe, I deployed it across everything I have. It's insanely useful. I can now address all of my LXC containers without SSHing into their hosts first. I can cease exposing SyncThing and some other local-only services to the internet. I can route everything through my dedicated server as an exit node. I am fantastically enamoured by it. ---------------------------------------------------------------------- lilolalu · 2023-12-28 12:53 Maybe its just a different default behaviour? AFAIK tailscale makes all clients reachable among another which is not necessarily what you want. But as far as i can see at least Netmaker and Netbird offer both options... https://itnext.io/why-you-might-not-want-a-mesh-vpn-21ac040c767b ---------------------------------------------------------------------- FuriousRageSE · 2023-12-28 13:15 "How much" harder/difficult is it to setup headscale my self on a vps, mange it, compared to "already made" tailscale? I will assume, difficulty level is little higher, since you have to have a server, install it to begin with. but the rest? ---------------------------------------------------------------------- wrath_of_reaper · 2023-12-28 13:16 I would also say that it‘s for others getting access + the usability. ---------------------------------------------------------------------- Specific-Action-8993 · 2023-12-28 13:17 For just accessing your LAN then WG is excellent and very easy to set up especially if you just just the pivpn script. Follow the wizard, open a port, create a user and you're done in 5 mins. ---------------------------------------------------------------------- newked · 2023-12-28 13:30 Everything you use today is a potential attack vector, the more stateless you can go the better ---------------------------------------------------------------------- IsPhil · 2023-12-28 14:05 I don't get it... For what you needed, you already had wireguard working. You could have just added a new user right? And then if your gf downloaded the wireguard Mobile app you'd be done. What did tailscale add for you? ---------------------------------------------------------------------- nerdyviking88 · 2023-12-28 14:08 out of curiosity, how much traffic are you seeing going through your Headscale/Derp nodes? Trying to size this out for scale. ---------------------------------------------------------------------- nerdyviking88 · 2023-12-28 14:09 How much traffic actually ends up going through the Netbird server? Trying to size out a deployment at scale ---------------------------------------------------------------------- lilolalu · 2023-12-28 14:11 The same amount that goes through a Tailscale server ---------------------------------------------------------------------- enongio · 2023-12-28 14:12 I can't believe that nobody talks about netbird. Open Source and a really nice alternative to tailscale. Performance is much better also. https://netbird.io/ ---------------------------------------------------------------------- SINdicate · 2023-12-28 14:13 Anyone using pritunl? How does it compare to headscale? ---------------------------------------------------------------------- nerdyviking88 · 2023-12-28 14:15 Yes, I understand that. I'm actually wondering if you have any values from what you're seeing in your experience. ---------------------------------------------------------------------- mxcw · 2023-12-28 14:28 +1 for netbird ---------------------------------------------------------------------- lilolalu · 2023-12-28 14:32 I think it depends entirely on your routing setup and the amount of users. ---------------------------------------------------------------------- Phynness · 2023-12-28 14:33 Yeah, until someone gains access to the Google/Microsoft/whatever account that you **had to** use for it. ---------------------------------------------------------------------- nerdyviking88 · 2023-12-28 14:35 Agreed. Was hoping someone would have an idea based on x users seeing y traffic, etc ---------------------------------------------------------------------- chaplin2 · 2023-12-28 15:23 To start a Wireguard client, copy your config (which looks like below, and change the keys in the interface section (use wg genkey to generate a key). It’s easier than SSH. —- [Interface] Address = 10.0.0.2/24 ListenPort = 51820 PrivateKey = WOjgnIOh2uOvpRZbiTKlZbtzHoq822J9tWVIVD4HUHA= DNS = 8.8.8.8 [Peer] PublicKey = kcBgci/r+GoFpLyyRKHVJJBXqqiACYkULzymJCzBAHQ= PresharedKey = IeAG59bYgi0AikFwXjo9j1KAEUlKMBI4mguc6R2FO3s= AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = myserver.dyndns.org:51820 ---------------------------------------------------------------------- Commercial_Count_584 · 2023-12-28 15:29 if you want to try to wrap your head around something else. Look into zero tier. It’s almost like tailscale. ---------------------------------------------------------------------- seriouslulz · 2023-12-28 15:30 The reason why Tailscale works is because it implements NAT traversal out of the box, which is also why you don't have to configure routing manually, as is the case with WG. Tailscale will only fall back to a DERP relay server when it can't successfully traverse the NAT. WG and Tailscale only share the topology aspect, routing is handled differently. [https://tailscale.com/blog/how-nat-traversal- works](https://tailscale.com/blog/how-nat-traversal-works) ---------------------------------------------------------------------- seriouslulz · 2023-12-28 15:40 Not really, both use cases you mentioned can be fulfilled by either Tailscale or WireGuard. The main differences lie in how much manual configuration and how much control you want to have over the solution: * Configuration: WG users and routing has to be set up manually, you need an external tool like wg-easy to simplify this. TS does this out of the box, no opening ports. * Control: With WG you host both the control and data planes. With TS, you don't own the control plane unless you set it up to use your own coordination server (ie. Headscale) and DERP relay if necessary. Both approaches have merits depending on your priorities and threat model. ---------------------------------------------------------------------- lilolalu · 2023-12-28 15:48 I think you should read up on the alternatives to Tailscale. (Netbird, Netmaker, Nebula, Tinc etc) They all do NAT Traversal. Technically Tailscale has ZERO USP's, it just uses a cleverly designed UX and debatable default settings. ---------------------------------------------------------------------- nagasgura · 2023-12-28 15:48 I just have a regular old openVPN instance running on my server and have the .ovpn stored in cloud storage. Can easily access my LAN from anywhere using any openVPN client. I'm still somewhat of a beginner, is there anything wrong with doing this? ---------------------------------------------------------------------- pastudan · 2023-12-28 15:50 I’d be curious about this too. My understanding is not much… their NAT traversal works pretty well most times unless you are behind a *very* aggressive corporate firewall that drops UDP packets ---------------------------------------------------------------------- pastudan · 2023-12-28 15:54 And incredibly slick UI, NAT traversal, and not worrying about dynamic DNS breaking your setup. I happily ran wireguard for years too but was convinced by how easy wireguard was ---------------------------------------------------------------------- IsPhil · 2023-12-28 16:00 Right, I get that. For a new user primarily. But OP had been using wireguard, seemingly without issues. So I don't see the real advantage here. I've recommended tailscale to people before too. But if wireguard is setup and working as op said, then adding new users is as simple as scanning a QR code that you generate. ---------------------------------------------------------------------- pastudan · 2023-12-28 16:02 They have a good article about how NAT traversal works, which was the black magic part to me. It’s pretty technical, but is a very good read https://tailscale.com/blog/how-nat-traversal-works ---------------------------------------------------------------------- pastudan · 2023-12-28 16:06 For me it was not worrying about dynamic DNS. Occasionally my up would change and break my wireguard setup for a while ---------------------------------------------------------------------- chaplin2 · 2023-12-28 16:08 Is a derp automatically included in Tailscale? Do we have to go over SSL crAp and its renewal? ---------------------------------------------------------------------- just_some_onlooker · 2023-12-28 16:19 What's a derp? ---------------------------------------------------------------------- Old-Assumption4984 · 2023-12-28 17:13 I use plain Wireguard and a VPS, I added my wife's phone recently, it wasn't rocket science and I still don't hand over the keys to my kingdom to a third party like Tailscale or Cloudflare. ---------------------------------------------------------------------- seriouslulz · 2023-12-28 17:19 Oh my mistake, that's true I haven't read up on those, my only frame of reference is WG so far. Apologies! ---------------------------------------------------------------------- HakimOne · 2023-12-28 17:21 I used to use Netmaker as my primary mesh networking tool instead of headscale/tailscale because it used kernel wireguard & was faster. But it was really hard to keep updated. They always introduced new breaking changes. Finally, when an update of netmaker requires reinstalling all client & a new performance improvement update came to tailscale, I switched completely to headscale. Never had a single issue with headscale update. ---------------------------------------------------------------------- zkhcohen · 2023-12-28 17:39 NAT traversal and dynamic DNS are definitely the huge benefits for power-users, but ultimately it's basically doing the same thing that Teamviewer has been doing for decades, except instead of an RDP-focus, it's on the network layer. ---------------------------------------------------------------------- gargravarr2112 · 2023-12-28 17:47 I've read it, it's a good article series. Like I said, I don't fully understand it, but the results speak for themselves. ---------------------------------------------------------------------- Jonteponte71 · 2023-12-28 18:06 Sometimes there is reason people actually like a product. Even if it’s created by a for profit company. That does not mean it’s automatically ”guerilla marketing”. Maybe it’s just mouth to mouth. But because we actually don’t meet and talk to people anymore. Reddit is the closest thing we have? And also. The exact same questions seem to be posted here several times a day. The same answers will be posted until something better comes along… ---------------------------------------------------------------------- ecnahc515 · 2023-12-28 18:23 You can use your own OIDC provider with tailscale. ---------------------------------------------------------------------- markeees99 · 2023-12-28 18:40 I think that if you intend to use services like Wireguard, that need to use your public IP in one way or another, you really have to set up DDNS with ddclient for example. Are people really exposing services to the internet without making sure that their public IP does not change or that records are updated accordingly when the IP changes ? ---------------------------------------------------------------------- DarkCeptor44 · 2023-12-28 18:58 It's wild how almost-religiously people here treat Wireguard, of course everything have tradeoffs, of course we will be dependent on external services (we are no matter what), but that doesn't mean we need to fear and care so much about dependency, or that the easy way isn't perfectly fine for most of the population, even being more tech- savvy and a programmer I still chose Tailscale because I didn't want to figure out NAT traversal and everything manually. I get it's called r/selfhosted but it doesn't mean we need to convince everyone to be fully selfhosted. ---------------------------------------------------------------------- IsPhil · 2023-12-28 19:24 See, now that's what I was looking for. ---------------------------------------------------------------------- larso0 · 2023-12-28 20:04 I've been using zerotier for many years now (since before tailscale existed) and it has been working great for me. Does anyone have an opinion on whether tailscale, or netbird that was mentioned in other comments, are better tools than zerotier? Or is it just same but different. Wondering if switching would give me any benefit. ---------------------------------------------------------------------- death_hawk · 2023-12-28 20:16 I've tried following guide after guide and I can't figure out how to the a headscale GUI working. ---------------------------------------------------------------------- pastudan · 2023-12-28 20:21 Ah, I was using ddclient, but inevitably things still broke. I invalidated all of my cloudflare API keys once, and another time the container it was running in failed to start (I blame Kubernetes here, but still). I just find the Tailscale service to be lightweight and reliable. ---------------------------------------------------------------------- bugtank · 2023-12-28 20:29 Woudl tailscale be good for a 10 person company? We are on Azure and I want to host some apps behind a firewall that only can be access via VPN. ---------------------------------------------------------------------- sinamics · 2023-12-28 20:56 Im also a long time zt user, i dont think there is a easier way to go about VPN. ---------------------------------------------------------------------- servergeek82 · 2023-12-28 20:56 Lurking this thread as I'm using wg-easy currently. ---------------------------------------------------------------------- sinamics · 2023-12-28 21:10 No, but OpenVPN isn't configured for peer-to-peer connections out of the box to my knowledge; it's typically set up in a client-server model where clients connect through a central server. This setup can sometimes result in higher latency compared to direct peer-to-peer connections. In contrast, ZeroTier, Tailscale and others, are designed to establish direct peer-to-peer connections using techniques like UDP hole punching, which can reduce latency by creating efficient, direct paths between clients. ---------------------------------------------------------------------- sinamics · 2023-12-28 21:13 I find ZT easier to use and configure. ---------------------------------------------------------------------- 202-456-1414 · 2023-12-28 21:51 it actually is the greatest thing ever ---------------------------------------------------------------------- 202-456-1414 · 2023-12-28 21:52 im using it through a reverse proxy that takes care of setting up the TLS cert ( Caddy ) ---------------------------------------------------------------------- 202-456-1414 · 2023-12-28 21:55 its very easy to make a periodic cron job to update an A record of your external IP https://valh.io/p/python-script-for-cloudflare-dns-record-updates- dyndns/ ---------------------------------------------------------------------- Geoffman05 · 2023-12-28 22:34 I don’t know about that. Sliced bread is pretty great. ---------------------------------------------------------------------- thehoffau · 2023-12-28 22:36 Gui's all rely on an api key and being on the same url/domain as the endpoint so you are needing reverse proxies and SSL. Like I said it's not easy :) ---------------------------------------------------------------------- thehoffau · 2023-12-28 22:39 Derp is a proxy for lack of a better description. It's a routing point for devices behind NAT so you can still connect to them and stuff.. (super simplified) and tailscale run those on your behalf globally. I have my own as it sits 2 hops from my internet provider and all my cloud resources so super low latency and I never route my traffic via shared resources.. ---------------------------------------------------------------------- thehoffau · 2023-12-28 22:45 Not sure who is down voting. https://github.com/juanfont/headscale/blob/main/docs%2Ftls.md ---------------------------------------------------------------------- thehoffau · 2023-12-28 23:01 I've not tracked it... It's only my network and I use this one actively maybe once a week for a few hours... And once a quarter for a week. It's not a lot of traffic I've never seen my linode graphs really move... ---------------------------------------------------------------------- r3volts · 2023-12-28 23:06 Headscale, traefik, let's encrypt. Pick up a domain on cloudflare and then search YouTube with those 3 topics. There are a bunch of homelab youtubers with config files on a git to get you started. ---------------------------------------------------------------------- gtg062s · 2023-12-28 23:19 @Nestramutat Are you seeing higher battery usage with Tailscale active on her cell phone? This is part of my hesitation using it on Android. ---------------------------------------------------------------------- Fuzzdump · 2023-12-29 00:01 It sounds from this comment that you consider Wireguard a tool that is better than Tailscale for some use cases, but you didn't really explain which ones. Can you elaborate? >Yes you can use Headscale, but if you use that, you are not the target audience for Tailscale anymore. Why is that a bad thing? ---------------------------------------------------------------------- Phynness · 2023-12-29 01:03 Most people that use their own OIDC would use headscale and not Tailscale. ---------------------------------------------------------------------- NeverrSummer · 2023-12-29 01:17 >Are people really exposing services to the internet without making sure that their public IP does not change or that records are updated accordingly when the IP changes ? I mean I am. My IP address changes about once every five years or so. When that happens I just update the records by hand. It's three lines in the router and four on Cloudflare. I have not yet felt that automating it was necessary or likely to save time in the long run. ---------------------------------------------------------------------- xiongmao1337 · 2023-12-29 01:30 Dude I feel the same way right now. I set it up a couple of years ago just for me to access my own devices remotely, but today I actually had to edit the access control config for the first time so my buddy has access to a single port on a single device. I was not really interested in looking at the past few days because I was like “I’m gonna have to deal with figuring out their nonsense syntax and then it’s gonna take 12 tries”, but damn, it took 30 seconds, worked the first time, and now I’m hoping to find more reasons to use a more advanced configuration. ---------------------------------------------------------------------- OtherUse1685 · 2023-12-29 01:42 Netmaker is better now than before, I used it and I liked it. However I met the same issue like you, and I moved back to Tailscale. Netmarker client is very buggy and I don't like it. Headscale looks good on paper but I hate the idea of tinkering just to switch the controller. ---------------------------------------------------------------------- garconip · 2023-12-29 02:56 I had had your thinking until I changed my apartment and the new ISP set up CG-NAT. I decided to install both tailscale & zero-tier, my openwrt router can't store big tailscale. I now hire a cheap VPS and come back to wireguard. I still have tailscale-zerotier just in case the VPS goes down (it happened sometimes). ---------------------------------------------------------------------- DogRocketeer · 2023-12-29 03:34 i have openvpn (may switch to wireguard soon for performance not that I'm seeing any performance issues). ​ I have openvpn running on my pfSense router. I use the dns forwarder and various other tools in the router that makes it quite robust and a few levels above a standard home use router. So maybe that just makes the setup "easier" for me.. but.. my wife (and I) just runs the openvpn client on her phone when out and shes instantly connected to all our LAN locked stuff, shes not super techy but she has zero issues getting that to work every time. I dont see how it could be easier. From the way you're describing your setup, tailscale shouldnt have been any kind of massive eye opening moment. it would have been a lateral move with less control technically. ppl are my work keep hyping tailscale beyond measure too and its starting to get pretty annoying. Its not that its bad its just not "new" either. I mean Teamviewer has been doing similar things for years. People just like to jump on the bandwagon and feel included. We get it, you've also heard of Tailscale. Congrats. ---------------------------------------------------------------------- LoganJFisher · 2023-12-29 03:50 I've stuck with DuckDNS because nothing else seems to really do what I want. Cloudflare tunnel have video streaming as a violation of their TOS. VPNs like Tailscale make it a hassle to add new devices. I don't particularly love DuckDNS since it has lower uptime than I'd like (although frankly not that bad), but I'm yet to find another free option that offers the functionality I want and doesn't come with any significant downsides. ---------------------------------------------------------------------- Nestramutat- · 2023-12-29 04:01 If you want a free option, just get an oracle free tier VPS, run a wireguard tunnel between it and your network, and proxy requests through the tunnel. You've not got a static IP to point your DNS to, and your real IP is hidden. ---------------------------------------------------------------------- LoganJFisher · 2023-12-29 04:04 I'll look into that. Thanks. Would I still use Nginx proxy manager with that? ---------------------------------------------------------------------- Nestramutat- · 2023-12-29 04:12 Run an HAProxy container on the VPS. Use tailscale (or vanilla wireguard, or whatever tunnel you prefer) to get a tunnel between the VPS and your local server. Set up HAProxy to proxy requests hitting the VPS through the tunnel to your Nginx Proxy Manager instance running locally. ---------------------------------------------------------------------- LoganJFisher · 2023-12-29 04:22 I think I follow. Thanks. ---------------------------------------------------------------------- LoganJFisher · 2023-12-29 05:01 If I'm running a HAProxy container on the VPS, doesn't that mean that I'd only be able to use this method for free for 30 days? https://www.oracle.com/cloud/free/ ---------------------------------------------------------------------- Nestramutat- · 2023-12-29 05:48 I haven't personally used Oracle cloud, I pay $3/mo for my VPS. You can get a free ‘VM.Standard.E2.1.Micro‘ shape for free though, which you can do anything you want on ---------------------------------------------------------------------- LoganJFisher · 2023-12-29 05:50 Gotchya. Thanks. I'll need to look into all this. ---------------------------------------------------------------------- death_hawk · 2023-12-29 08:26 I have all 3 working (and a domain) but I still can't get the GUI to connect. Got a link to the git? I had to screw with the config files a few times (private key is currently missing) but I still can't get the GUI working. ---------------------------------------------------------------------- death_hawk · 2023-12-29 08:27 Did that too and I still can't get it working. Tried caddy, traefik, and NPM all SSLed. ---------------------------------------------------------------------- r3volts · 2023-12-29 11:03 I don't know any off the top of my head but I know I've watched a video or two at some point. Maybe Jim's garage? ---------------------------------------------------------------------- GolemancerVekk · 2023-12-29 15:11 Normally, a tailscale/headscale server only negotiates between nodes so they break out of NAT, after which the nodes pass traffic directly to each other. On rare occasions, if the ISP is blocking certain UDP ports, this negotiation fails and the server has to proxy the connection between nodes. The proxying is done by another type of server called DERP, which is geographically located close to both nodes. ---------------------------------------------------------------------- reddit0r_123 · 2023-12-29 16:54 Agree, it's very simple. I'm using wg-easy and it's very user friendly. ---------------------------------------------------------------------- ecnahc515 · 2023-12-29 16:57 So what kind of point were you even trying to make then? ---------------------------------------------------------------------- Phynness · 2023-12-29 17:02 That 99.99999% of people using Tailscale are using Microsoft/Google/whatever to login to it, and having access to your home network available to one of those accounts is not worth the convenience of using Tailscale over vanilla Wireguard. ---------------------------------------------------------------------- jovialfaction · 2023-12-30 16:16 Yes, I don't understand the swooning over tailscale. It takes about 10mn to set up wireguard. Start wg-easy. Forward UDP port in your router UI. Add a user in wg- easy UI and scan the QR code it shows you or download the config file. Done. Add an extra 10mn to set up duckdns if you don't have a static IP or a router with dynamic DNS (my Asus router comes with one)