This is one of the core things I've been working towards with DNTLS [1]. I love the idea of tunnels, especially for sharing between private parties. The SaaS providers (Tailscale, Cloudflare, etc.) have done a good job making it really easy on their infra, but it really blurs the line of "self-hosted" to me. Ideally we end up with solutions like this that can be run entirely without an intermediary.

[1]: https://dntls.substack.com/p/the-new-internet

▲

gonzalohm 10 hours ago | parent [-]

So like wireguard then?

	▲	subscribed 9 hours ago \| parent \| next [-]
		Yeah, and Dropbox is just rsync and scp :)
	▲	aliasxneo 10 hours ago \| parent \| prev [-]
		If that's all that was necessary then I feel like a lot of these SaaS tools wouldn't be as popular. I suspect a lot of Tailscale's success is because wireguard is not easy nor does it solve the full problem space (i.e. discovery). With `tailscale serve` I can get a private HTTPS endpoint to my local machine in almost no time.