Other softwareAI models and assistantsLibraries and frameworksOperating systems and desktopMedia and creativeAI coding toolsInfrastructure and DevOpsTerminal and shellBrowsers and extensionsEmail and chatSelf-hosted and home serverNetworking and VPNEditors and IDEsSecurity and passwordsProductivityDatabasesFiles, sync and backupGit and code hostingNotes and knowledgeMonitoring and analyticsSearchFinance
Networking and VPN
What HN commenters recommend, ranked by distinct recommenders. Under each: what people praise most and the most common caveat, or the strongest quote where there is no summary yet.
- 1.Loved for Easy setup, Remote dev access · Caveat Security concerns
- 2.Loved for Home remote access, Simple setup · Caveat Mesh scaling
- 3.Loved for Privacy and trust, Anonymous signup · Caveat Blocked IPs
- 4.Loved for No exposed ports, Free to use · Caveat Config friction
- 5.Loved for NAT traversal, Enables projects · Caveat Unreliable connectivity
- 6.Loved for Ad blocking, Custom profiles · Caveat Customer support
- 7.Loved for Reverse proxy, Automatic SSL · Caveat Default behavior
- 8.Loved for Non-corporate alternative, Instance choice · Caveat Search and discovery
- 9.Loved for Custom feeds, Data portability · Caveat Political toxicity
- 10.Loved for Tailscale alternative, Self-hosting · Caveat Client usability
- 11.Loved for Reliability, Firewall features · Caveat Accessibility
- 12.Loved for Reverse proxying, Simple setup · Caveat Stagnant features
- 13.Loved for Connection visibility, Granular blocking · Caveat Paid upgrades
- 14.Loved for Privacy and anonymity, Censorship bypass · Caveat Site blocking
- 15.Loved for Self-hosted control, Tailscale client support · Caveat Fewer features
- 16.Loved for Reliable service, Lower prices · Caveat Missing TLDs
- 17.Loved for Finding jobs, Professional connections · Caveat Feed quality
- 18.Loved for Easy self-hosting, DNS blocking · Caveat Upstream TLS
- 19.Loved for Blocklist adblocking, Works with VPN · Caveat Stability issues
- 20.Loved for Connection visibility, Layered security · Caveat Process attribution
- 21.Loved for Proven reliability, Familiar standard · Caveat Security history
- 22.Loved for Curatable feed, Tech discussion · Caveat Toxic content
- 23.I would absolutely encourage everyone reading this to check out Reticulum [1] if you haven't already.
- 24.I never liked iptables, but nftables is pretty nice to write and use.
- 25.an haproxy load balancer was much, much better on HTTP load balancing than Python code was
- 26.I've been using it as a Tailscale replacement for a few weeks, including hosting game servers, with about equivalent latency, and it seemed pretty stable.
- 27.
- 28.I installed LuLu recently and it's been nice to have that extra peace of mind.
- 29.it's very easy to just run a quick tunnel with "cloudflared tunnel --url localhost:XXXX"
- 30.Mikrotik router and unifi everything else has kind of been my go-to for at least 10 or 12y now.
- 31.For the YouTube app, I use proton’s Albania vpn and no ads there either.
- 32.So I use it (including its Messenger component) a lot to keep in touch!
- 33.I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware
- 34.For privacy reasons, I use NetGuard to block this and other similar domains.
- 35.I switched to deSEC because they allow you to create tokens for DNS-01 validation which are tightly scoped to a single subdomain.
- 36.This is convenient because you don't have to synchronize zone files on multiple hosts.
- 37.That combined with a proper UFW setup keeps the weather clear for me.
- 38.So far I have to say I am really impressed. Clients are all open source, really configurable, and speed and reliability seems as good as Mullvad.
- 39.Since starlink it's a breeze. We will finally be able to get video feeds off of some of the stations
- 40.I protect the admin interface with Cloudflare Zero Trust, using email-based authentication
- 41.Pfsense and maybe openwrt allow split horizon DNS that allows Wireguard tunnels to work seamlessly
- 42.make sure you change the DNS in network manager and the the browser.
- 43.popular opensource implementations and their documentation. Sing-box, Xray core, hiddify
- 44.I use dnsmasq mostly for its fantastic integration with DNS.
- 45.Meshtastic, AnoNet, Reticulum, MeshCore, etc are all evidence of that