▲ | Jnr 17 hours ago | |||||||
Tailscale (also using wireguard for transport) and similar overlay networks kind of do that. With Tailscale there is a central server, you can sign in with single-sign-on, that server enables automatic mesh configuration and helps nodes communicate specifics for port knocking, routing, dns, etc. And there are derp servers (think of them like TURN servers) that can be used as proxies when direct communication can't be established. Altogether this is easier to set up than Wireguard, but the central server is not open source (but there is Headscale, and open source implementation), and it is not as well supported on routers (it is supported on OpenWRT though and probably can be set up using containers on Mikrotik). | ||||||||
▲ | irunmyownemail 9 hours ago | parent [-] | |||||||
With Wireguard I own or control everything. Why would I surrender any of that to Tailscale? | ||||||||
|