tailscale vs cloudflare tunnel? which is better a homelab - eviltoast

Hello I’ve been using cloudflare to get remote access for the couple apps I selfhost, but lately I’ve been hearing about the wonders of tailscale.

It seems that the free tier is enough for my use. Which would be a safe option to have remote access for my 3D printer? Also how are both in terms of privacy?

  • varsock@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    1 year ago

    discovered tailscale from this post and after reading their “how tailscale works” I was hoping to get some clarification from an activer user (you).

    CF tunnels setup an outbound-only tunnel from my private network via cloudflared, I have no ingress holes in my firewall to access my services. cloudflared does all the proxying. Plus my IP changes monthly as I don’t pay for a static one from my ISP. This “outbound-only” connection is resilient to that.

    Tailscale is point-to-point (for data plane) connection and only the control plane is “hub and spoke”. This sounds like I need to allow ingress rules on my private network so my server can be connected to? Is this true or where did I misunderstand?

    • BastingChemina@slrpnk.net
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I’m probably not the beat person to answer to you about the technical aspect and I’m not sure if I fully understand your question.

      However I can tell you that there is no need to change anything at network level for tailscale to work.

      I’ve installed and used tailscale on desktops, VM, raspberry, NAS or smartphone on plenty of different network, I’ve also remotely guided people to install tailscale on their machine at home and it always just worked. No issue at all and nothing to change on the network for it to work.

      • varsock@programming.dev
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        interesting, I’ll have to read about this some more then. thanks for pointing me in the right direction