Comment on Help an idiot protect his homelab and few services exposed to the internet.
Appoxo@lemmy.dbzer0.com 3 days ago Issue:
Most clients we instruct on homeoffice usage with vpns are already unablebto remember the workflow:
VPN -> (wait until green for connected) -> open work app -> Do work -> close work app -> disconnect vpn.
Now you also may not want to tunnel all traffic (if you don’t have a VPS with symmetric Gbit and unlimited traffic) so you’d need to set up split-tunneling and/or limit the apps allowed for the tunnel (works in android).
Honestly? It would be easier to set up a S2S split-tunnel VPN with wireguard on the relatives router.
unique_hemp@discuss.tchncs.de 3 days ago
You can just specify AllowedIPs in the wireguard client config to route only traffic to your services through the VPN, works great.
Yes. Split-tunneling…
But if you are really hardcore about restrictions and would need to update the profiles it will be a pita…
Scheduling stuff is annoying ;-;
unique_hemp@discuss.tchncs.de 3 days ago
AllowedIPs is a client side restriction that can be ignored anyway, no real security benefit from not just putting your entire network there.
MrTolkinghoen@lemmy.zip 3 days ago
Can you ellaborate?