Vpn

Over the last two weeks we introduced three mesh VPN solutions one at a time: NetBird, Tailscale, and Headscale. Three posts, three products, one open question:

In Post 2 of this series we introduced Tailscale as the UX gold standard in the mesh VPN segment. With one honest caveat: The control plane is proprietary,

Mesh VPNs are replacing the old concentrator model. Anyone stepping into this space cannot avoid one name: Tailscale. The service has been the UX gold standard

Summary A mesh VPN is a VPN topology in which every authorised client builds direct, encrypted peer-to-peer connections to every other client. Only identity,

Summary NAT traversal is a collection of techniques that allow two endpoints sitting behind Network Address Translation (NAT) devices to establish a direct

Summary Peer-to-peer (P2P) is a network model in which participating nodes communicate directly with each other rather than through a central server,

Summary An SSL VPN is a remote-access VPN that wraps user traffic inside a TLS connection to a central concentrator. It became the dominant pattern for

Summary STUN (Session Traversal Utilities for NAT) is a lightweight protocol defined in RFC 8489 that lets a client behind a NAT learn the public IP address and

Summary TURN (Traversal Using Relays around NAT) is a protocol defined in RFC 8656 that relays traffic between two endpoints when a direct peer-to-peer path

Summary A VPN (Virtual Private Network) builds an encrypted tunnel between two endpoints over an untrusted network so that remote systems behave as if they were

Summary WireGuard is a modern open-source VPN protocol designed for simplicity, performance, and strong cryptography. It is built into the Linux kernel since

Classic SSL VPNs are aging. The last two years have shown multiple critical vulnerabilities in the major concentrator products, while at the same time the

In the previous posts in this series, we looked at setting up a Mac Mini M4 with Ollama behind a Headscale VPN as a local LLM endpoint and OpenCode as a CLI

Every AI-assisted tool your team uses - coding agents, chatbots, workflow automations - sends data to someone else's server. Every prompt, every code snippet,