Submitted 1 year ago by AppearanceBoring9229@sh.itjust.works to selfhosted@lemmy.world
Hello I’ve been using cloudflare to get remote access for the couple apps I selfhost, but lately I’ve been hearing about the wonders of tailscale.
It seems that the free tier is enough for my use. Which would be a safe option to have remote access for my 3D printer? Also how are both in terms of privacy?
Tailscale. Because it can do both. It functions as a mesh VPN for private access, but it also has Tailscale Funnel which does the same thing as Cloudflare tunnels but you don’t give all your traffic to Cloudflare
Is there a specific reason tailscale having all the same traffic opposed to cloudflare is a better option? I use cloudflare tunnels right now and figured them handling some of the data is better than me by myself.
Well like… if you’d rather put your data in the hands of a company instead of your own when you could easily do the same thing yourself, why are you self hosting in the first place?
If it’s just you, and you’re willing to install it on all your devices, Tailscale is the best option IMO. If you need to share things with others, use CF Tunnels.
It’s mainly just for me and my wife, I guess I can set it up for her.
Thanks! That sounds exactly what I’ve been looking for. Will try it out and if it’s too complicated I will use Tailscale.
You can just self-host Wireguard on an always-free Oracle cloud machine (or of course any other cloud host). It’s quite easy to set up and there are open source Wireguard UIs and clients for any OS. I will never rely on a company like Tailscale or Cloudflare for something like this.
That wouldn’t help with accessing their home network.
I would use wireguard at home for this, but we have CGNAT so that is impossible/hard so I just use tailscale, which uses WireGuard anyways.
Yes it would. If wireguard is hosted in a vps, they can setup a client on their home network and mobile device, bypassing their home and isp nat.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| CF | CloudFlare |
| DNS | Domain Name Service/System |
| VPN | Virtual Private Network |
[Thread #262 for this sub, first seen 5th Nov 2023, 06:50] [FAQ] [Full list] [Contact] [Source code]
I like tailscale and have been testing it for a few months. I’m also using headscale as the control plane.
Unfortunately the android client is somewhat unreliable. It works most of the time but once in a while, connections to your tailnet will fail for a bit and require retries. If you ping a machine in your tailnet during this problem, it will show packet loss and then start working after a few pings. This unfortunately makes it difficult to have a reliable split DNS setup.
I’ve done everything to try and understand what happens without success. It seems like state is lost somewhere and a few packets flowing will fix it. Running a constant ping from Android to my tailnet “fixes” the problem, but is not a great workaround.
Just something to keep in mind before you jump headfirst.
Cloudflare hates VPNs, so when it comes to privacy, it’s not really a contest.
Wait, what’s this about them hating VPNs?
I guess they mean that you get to solve many Captchas if you access Cloudflare-protected sites through a VPN.
Definitely Tailscale
Tailscale also has the advantage that you easily access udp services, the last time I checked this was not really possible with cloudflare tunnels
What I enjoy with tailscale is that the traffic goes directly from the host to the client.
Since there is no cloud relay I can connect to all my services via tailscale, even on local network and it’s not going to impact the speed.
This way I only have one setup that works the same way on local network or remotely but still have the local network speed when I am at home.
discovered tailscale from this post and after reading their “how tailscale works” I was hoping to get some clarification from an activer user (you).
CF tunnels setup and outbound-only tunnel from my private network via cloudflared, I have no ingress holes in my firewall to access my services. cloudflared does all the proxying. Plus my IP changes monthly I don’t pay for a static one from my ISP. This “outbound-only” connection is resilient to that.
Tailscale is point-to-point (for data plane) connection and only the control plane is “hub and spoke”. This sounds like I need to allow ingress rules on my private network? Is this true or where did I misunderstand?
I’m probably not the beat person to answer to you about the technical aspect and I’m not sure if I fully understand your question.
However I can tell you that there is no need to change anything at network level for tailscale to work.
I’ve installed and used tailscale on desktops, VM, raspberry, NAS or smartphone on plenty of different network, I’ve also remotely guided people to install tailscale on their machine at home and it always just worked. No issue at all and nothing to change on the network for it to work.
That’s amazing I thought it would slow down on lan. Since myy upload speed is really slow.
Tailscale Funnel and Serve will also let you point services to the public. I only use tailscale for all of my access needs and it’s perfect and easy to handle 👌
Why not both?
I use tailscale for full access to network and cloudflare tunnels to specific access to a service
Neither, I setup a VPS and fireguard. I also use netbird for some things that aren’t publicly accessible
Do you mean Wireguard? I couldn’t find anything called Fireguard.
Yes
I’m suprised nobody mentioned nebula: A scalable overlay networking tool with a focus on performance, simplicity and security.
I’ve been running it for about two years on multiple machines and it worked flawlessly so far. Even connecting two hosts, both behind mullvad-vpn tunnels.
The only downside is, that you have to host your own discovery server (callled “lighthouses”). One is fine, but running at least two removes the single point of failure from the network.
monkeyman512@lemmy.world 1 year ago
A VPN is going to offer better security. I would only use cloudflare if you need something to be open to the public. This is useful when you have non-technical users that aren’t going to understand using a VPN.
Evotech@lemmy.world 1 year ago
Just use CF with host restrictions. You can easily add which hosts should have access of you want to limit access further