Tag: vpn

Route specific Docker containers through Mullvad VPN via Gluetun, keeping Plex and everything else on your home WAN. No iptables nightmares, no tunneling drama.

wg-easy gives WireGuard a web UI: create clients, scan QR codes, see traffic stats, no SSH required. Self-hosted VPN made actually easy.

Encryption hides content, not shape. Here's why state-level censors don't read your VPN traffic, they recognize it, and what actually still works in 2026.

Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.

Tailscale vs Nebula vs ZeroTier vs NetBird, honest comparison of mesh VPN options for homelabs, small teams, and self-hosters in 2026.

OpenConnect replaces the bloated AnyConnect client on Linux. Run ocserv for a self-hosted Cisco-compatible VPN server, no 200MB installer required.

Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest, no rsync.net bill or vendor lock-in.

OpenVPN is the battle-tested workhorse. WireGuard is everything VPNs should have been from the start. In 2026, here's which one you should actually use.

You enabled the VPN but half your traffic still bypasses it. Here's why and how routing actually works.

Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.

Go beyond tailscale up with ACL policies, exit nodes, subnet routers, MagicDNS, and Taildrop. Plus: self-host your own control plane with Headscale.

Squeeze every MB/s from WireGuard: MTU sizing, GSO/GRO CPU offloading, AllowedIPs routing, PersistentKeepalive tradeoffs, and iperf3 benchmarks included.