alt Hacker NewsI like Tailascale as a product but I decided to move my homelab to plain WireGuard.
I wasn't using any of the additional features, I can get away with exposing a port on my router and I am changing devices rarely.
News like this make me happy I removed a lot of complexity and attack surface
Replies
From the sounds of what info they felt was safe to provide, this wouldn't have impacted you anyway.
On the road I find WireGuard to be quirky when connecting to DNS names. When I'm on an IPv6 only network (like T-Mobile), connecting to a DNS name that offers A and AAAA, WireGuard on iOS prefers the A record, making me connect over one of T-Mobile's 464XLAT proxies which time out after x minutes. This then makes the connection look dead until I do something on my phone that re-enables it.
Tailscale doesn't have this issue.
Using anything on top of wireguard or plain? I heard headscale adds a nice layer
You shouldn’t open a port on your router.
Connect from your home to a public VPS and connect your public devices to that VPS.
BTW, netbird is a cool alternative also
> I can get away with exposing a port on my router
using wireguard is awesome, but I wouldn't say deploying and maintaining it lacks complexity exactly. and you didn't get rid of attack surface, you just made it your responsibility ;)