Hacker News new | ask | show | jobs
by lucw 926 days ago
I setup a proxmox on a bare metal server to create development VMs. The solution that works for me is IPv6. Every VM that I create is publicly accessible, it's secured by a firewall and openssh public key only access. It's standards compatible, every smartphone and tablet has access, including chromebooks. Tailscale is not available on chromebooks. If tailscale looks interesting for your use case, but you'd rather have a standards compliant solution, look into IPv6. From an engineering perspective, it's a much cleaner solution.
2 comments

You can install Tailscale on a Chromebook[0], you can also install it in the linux environment, and you can even get an SSH console from a browser that uses WASM to spin up an ephemeral node[1].

I used to have open ports publicly, but have since closed everything down and set up tailscale. Got tired of having to manage a firewall, religiously keeping everything up to date, and script kiddies trying to get in.

Tailscale reduces management to near zero, or as close to zero as you can probably get. Even family members can use it, and without my help.

On Android I don't want Tailscale connected all the time, so I have Tasker auto-connect whenever I open an app that needs LAN access. It's pretty convenient, but I'd still say it's the most inconvenient part of my current setup.

[0] https://tailscale.com/kb/1267/install-chromebook/

[1] https://tailscale.com/tailscale-ssh-console/

> It's standards compatible What standard is Tailscale breaking? I agree your solution is more elegant and simple with less running components, but the trade off is more setup.