I currently have a server running Unraid as the OS, which has some WireGuard integration built in. Which I’ve enabled and been using to remotely access services hosted on that server. But as I’ve expanded to include things like Octopi running on a Pi3 and NextcloudPi running on a Pi4 (along with AdGuardHome), I’m trying to determine the best way to VPN to my home network with the goal of reaching services I’m hosting, and do it safely of course.

I have a Netgear Nighthawk that has some VPN functionality built in that uses a OpenVPN account. Is that ok or would it be advisable to come in a different way?

    • fenndev@leminal.spaceEnglish
      41·
      11 months ago

      I’ve seen a lot of descriptions of Tailscale but still have no idea what exactly it does. I get that it uses Wireguard, but what differentiates it from a typical VPN setup? NAT traversal?

      • BCsven@lemmy.caEnglish
        11·
        11 months ago

        It does the wireguard config for you so you don’t have to reconfigure each machine when a new item is added to your network. Still peer to peer type network rather than single vpn to a lan router

    • RedFox@infosec.pubEnglish
      2·
      11 months ago

      Doesn’t tailscale retain closed source for the coordination server?

      I think nebula mesh is totally open and you can run your own coordination server, lighthouse?

      Nebula would need static IP, TS can do that part for $

    • stown@sedd.itEnglish
      32·
      11 months ago

      Tailscale is a service that relies on a third party to facilitate the VPN connection between your client and server. It is designed for people who don’t want to or cannot forward ports. Your server and your client both talk to the Tailscale servers and traffic is routed that way.

  • Max-P@lemmy.max-p.meEnglish
    5·
    11 months ago

    Any reason the VPN can’t stay as-is? Unless you don’t want it on the unraid box at all anymore. But going to unraid over VPN then out the rest of the network from there is a perfectly valid use case.

    • FabulousAardvark@lemmy.mlEnglish
      2·
      11 months ago

      This is how I use it and it’s been rock solid for ages! Can even pass pihole through it so you get no ads when out and about.

    • Father_Redbeard@lemmy.mlOPEnglish
      2·
      11 months ago

      Well, I didn’t realize that was an option to be honest, lol. I am having some issues with that box at the moment though so having a pi or my router acting as the gateway appealed to me with it’s longer uptime

  • giacomo@lemm.eeEnglish
    5·
    11 months ago

    I think openvpn works completely fine for most use cases and didn’t have any trouble with it at all. I did however switch to wireguard on my gateway and I get a little better throughput compared to openvpn. That being said, I’m also using a pfsense box as my home gateway, so access to internal services has been easy as general routing gets.

  • Darkassassin07@lemmy.caEnglish
    2·
    11 months ago

    I host an openVPN instance from a Debian machine with my phone permanently connected to it.

    Keeps my phone within my lan while roaming so it has access to non-public services like pihole, the arr stacks management interfaces, ssh/ftp, etc. Also keeps my browsing private + secure on public/work wifi.

    Only the things I share with others like Emby get exposed to WAN (through a reverse proxy), the rest is VPN/LAN access only.

  • qjkxbmwvz@lemmy.sdf.orgEnglish
    2·
    11 months ago

    As others have said, I’d play with routing/IP forwarding such that being VPN’d to one machine gives you access to everything — basically I would set it up as a “road warrior” VPN (but possibly split tunnel on the client [yes I know, WireGuard doesn’t have servers or clients but you know what I mean]).

    Alternately, I think you could do some reverse proxy magic such that everything goes through the WireGuard box — a.lan goes to service A, b.lan to service B, etc., but if you have non-http services this may be a little more cumbersome.

  • originalucifer@moist.catsweat.com
    21·
    11 months ago

    openvpn is a decent standard, no reason it wont or shouldnt work.

    seems like a lot of pis…ever thought of consolidating them into containers in a single box?

    • Father_Redbeard@lemmy.mlOPEnglish
      31·
      11 months ago

      Most services are on the unraid box. But I had a pi running Pi-hole for a long time (switched to adguardhome) and wanted that separate from the main server in case it went down. Pis boot up a lot faster than my server hardware and then you still need to start the array and mount drives. Having AGH on a Pi as primary DNS means minimal internet outages caused by my tinkering. I was given the 4 and put it in a really cool case that can fit a M.2 or 2.5" SSD and boot from it. So that is NextcloudPi and AGH. The 3 is because my 3d printer is nowhere near a LAN connection and 3 has WiFi. The 4 is sitting next to my router. We won’t mention the 1B I’ve been messing with too…

      • originalucifer@moist.catsweat.com
        11·
        11 months ago

        ha, thats great! i got a couple of old dell R920s mirrored for ha, they take foreeever to boot.

        but those containers, damn i love bein able to slap those containers around like theyre nothing… most restart in seconds

  • Decronym@lemmy.decronym.xyzBEnglish
    1·
    11 months ago

    Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

    Fewer Letters More Letters
    DNS Domain Name Service/System
    IP Internet Protocol
    NAT Network Address Translation
    SSD Solid State Drive mass storage
    VPN Virtual Private Network
    VPS Virtual Private Server (opposed to shared hosting)

    6 acronyms in this thread; the most compressed thread commented on today has 4 acronyms.

    [Thread #434 for this sub, first seen 17th Jan 2024, 23:25] [FAQ] [Full list] [Contact] [Source code]