Wireguard vs Tailscale vs OpenVPN?

I haven’t done it before, but it looks like you should be able to use udptunnel to accomplish this - https://www.wireguard.com/known-limitations/

And no, not a custom machine (yet), but WireGuard is supported out of the box on my Asus router.

DDNS doesn’t work with CGNAT, for one.

that’s fine, but it’s just a second thing to deal with, and Tailscale just handles it all so simply and easily.

Wireguard runs on UDP only, however there are multiple projects on github for wrapping it in TCP.

I used to do this but moved to Tailscale for better WAF (I want her to get Adblock benefits without knowing about nitty gritty ). Also if OpenVPN takes my precious port 443, I have to host other sites ok weird ports.

Might do what you do

I mean that every device has a direct VPN connection to every other device. That means no central VPN server, every node in the network is its own VPN server. But it’s a lot of work to do manually and can be technically difficult to achieve because of NAT so tools like Tailscale make it more viable for the average Joe.

You’re right, nobody should ever comment recommendations ever

Thanks for the info, I’ll have a look!

Try to find one app which works with iOS/android without doing ton of weird things.

Just FYI, openvpn can proxy non-openvpm tls traffic to a webserver.

https://www.vpntutorials.com/tutorials/openvpn-sharing-a-port-with-a-webserver-on-port-80-443

”As i’d like to keep my synology NAS purely for files and only acessable on my local network.”

On top of that, VPN inside network makes this tunnel:

End user → VPN server → router → VPN server → internet

”VPN is only useful outside your network” ”you want devices inside your network to use vpn?”

User case: Jerry goes to a school that restricts website X, how can Jerry stil access the website if in your case ingress traffic is NOT encrypted.

Only man here being a clown is you and your 5 year old ad hominems.

Yep but OpenVPN sucks ass when it comes to speed. I might very well do mix of wireguard+OpenVPN (if wg is blocked). However, Tailscale is one stop shop that takes care of everything.