Hi!

I often read suggestions to use something like Tailscale to create a tunnel between a home server and a VPS because it is allegedly safer than opening a port for WireGuard (WG) or Nginx on my router and connecting to my home network that way.

However, if my VPS is compromised, wouldn’t the attacker still be able to access my local network? How does using an extra layer (the VPS) make it safer?

  • 𝓢𝓮𝓮𝓙𝓪𝔂𝓔𝓶𝓶English
    6•6 months ago

    However, if my VPS is compromised, wouldn’t the attacker still be able to access my local network?

    That depends on your setup. I terminate my wireguard tunnels on my opnsense router, where I have explicit fw rules for what the vps hosts can talk to.