Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://eldritch.cafe/@HauntedOwlbear" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>HauntedOwlbear</span></a></span> makes sense...</p><p>I just am not a fan of <a href="https://infosec.space/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tailscale</span></a> as a centralized service and would rather evaluate <a href="https://infosec.space/tags/tinc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>tinc</span></a> (if <a href="https://infosec.space/tags/meshing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>meshing</span></a> is needed) and otherwise choose <a href="https://infosec.space/tags/WireGuard" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WireGuard</span></a>, <a href="https://infosec.space/tags/OpenVPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OpenVPN</span></a> &amp; <a href="https://infosec.space/tags/IPsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IPsec</span></a> depending on the client(s) and expected throughput... </p><ul><li>In fact I did custom-built boxes that got them into colocation as "VPN Hubs" (similar to those <a href="https://infosec.space/tags/Viprinet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Viprinet</span></a> <a href="https://www.viprinet.com/en/products/multichannel-vpn-hub%20but%20not%20with%20locked-down%20proprietary%20stuff" rel="nofollow noopener noreferrer" target="_blank">ones</a> ...</li></ul>