this post was submitted on 12 Oct 2024
74 points (100.0% liked)
Privacy
31958 readers
1053 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you're concerned about privacy I don't know why you'd use Tailscale over Wireguard directly. The latter is slightly more fiddly to configure, but you only do it once and there's no cloud middleman involved, just your devices talking directly to each other.
Yes, fair. I was just attracted by the no-hassle method of Tailscale.
Nope, just an open port. Works directly with public IP. I guess if some ISPs IP lease time is short and they keep changing it regularly, it might become a hassle.
Wait, this could work behind a provider NAT? That's something I never ever solved
I'm afraid if you're behind CGNAT it won't work. Your router should have unique public IP. I'm not too well versed though..
Thanks, that's sort of what I thought
Yes and because wiregurad is stateless you'll need a script that checks if your DNS endpoint has updated and restart the wireguard interface so it pulls the fresh DNS/updated IP address. I had to make said bash script for my nodes.