🔐
VPN & Remote Access
Secure Connectivity for My Homelab
Remote access to my homelab is crucial—whether I'm traveling or just away from home. Here's how I securely connect to all my services from anywhere in the world.
⚡
Tailscale: My Primary VPN
A zero-config mesh VPN built on WireGuard for secure, peer-to-peer connectivity across all my devices, regardless of physical location.
Zero-Config Mesh
No port forwarding, no complex configs, no NAT traversal headaches. Peer-to-peer connections established automatically behind even the strictest firewalls.
Exit Node Tunnelling
Route all internet traffic through my home fiber bandwidth. Essential for security on public networks and bypassing region locks globally.
MagicDNS Engine
Internal service discovery that works across the entire mesh. Access my lab using human-readable names like `proxmox` or `nas` without static IP management.
Seamless Handover
Transitions perfectly between 5G, Wi-Fi, and Ethernet without dropping connections. Truly "always-on" security for every mobile device.
🛠️
Alternative VPN Solutions
While Tailscale is my daily driver, there are other solid options depending on your needs and preferences.
WireGuard (Self-Hosted)
The protocol Tailscale is built on. If you want full control and don't mind manual configuration, raw WireGuard is lean, fast, and audited. You'll need to handle key management, port forwarding, and client configs yourself.
Headscale
An open-source, self-hosted implementation of the Tailscale control server. If you love Tailscale's ease of use but want to run the coordination infrastructure yourself, Headscale is the answer.
OpenVPN
The old reliable. OpenVPN has been around forever, widely supported, and rock-solid. It's more complex to configure than WireGuard and generally slower, but great for legacy compatibility.
Netmaker
Another WireGuard-based mesh VPN with a nice web UI for management. It's more feature-rich than plain WireGuard but requires more setup than Tailscale.
🔗 Learn More About VPN Solutions