this post was submitted on 09 Nov 2023
1 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
1
VPN tunnel that has... Approval? I don't know what to call it. (alien.top)
submitted 1 year ago by stoopiit@alien.top to c/main@selfhosted.forum
20 comments fedilink hide all child comments
 

I doubt this is a thing, but is there a VPN tunnel like headscale//tailscale that allows a person to approve a client connection from the app or elsewhere for another device without it? I'm asking because I want to use devices like tvs with jellyfin but behind tailscale as well. Is this a thing? I don't know exactly how the app works, so don't crucify me lol.

you are viewing a single comment's thread
view the rest of the comments
[–] NikStalwart@alien.top 1 points 1 year ago

I'm a smidge confused on what you are trying to achieve and how you think it will work.

As I understand you, you want to connect "embedded" devices where you do not control the software to a VPN network?

VPNs do need some kind of client (otherwise how does the network stack know to use the VPN protocol?) so how do you envisage this working without an app?

What is your desired topology like? Do you just want your smart TV/etc to connect to a remote media library over a VPN? If that's the case, then you are overthinking it with approvals etc.

You can achieve most of what you want with router configuration. Just define routes saying "Traffic from IP address 10.20.30.40 (TV) should go to 10.20.30.30 (gateway)" and then have the "gateway" handle the tunnel.

You can also look at tailscale's subnet routing (should work with headscale backend too).

Good luck.