Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
blog.cloudflare.com
Cloudflare Mesh provides secure, private network access for users, nodes, and autonomous AI agents. By integrating with Workers VPC, developers can now grant agents scoped access to private databases and APIs without manual tunnels.

It’s a 10 minute read when it should probably be a 2 minute read, likely due to LLMs fluffing it up (I got that vibe from skimming it). But what do you all think, is there anything in here that would compel you to switch from your current VPN solution to this?

  • hertg@infosec.pubEnglish
    54·
    2 months ago

    There’s nothing I’d like to do more than let the US internet-monopolizing company handle all my vpn traffic /s But without being snarky, for homelabbing purposes just use wireguard directly, it’s fun and not that hard to handle. Automate peer configurations using Ansible or some other automation tool if it gets hard to manage manually.

      • spaghettiwestern@sh.itjust.worksEnglish
        2·
        1 month ago

        If you’re not dealing with CGNAT, Dynamic DNS (DDNS) is relatively easy to set up, doesn’t require a VPS and is designed specifically for dealing with changing IP address endpoints.

        Instead of connecting using your (sometimes changing) IP address, you use a URL that dynamically updates when your IP changes. For instance, with DDNS you would access your home network using mynetwork.ddnsservice.com. The DDNS service returns your current IP and your connection can complete. Most routers have built DDNS clients that update the DDNS service when your home IP changes.

        There are various DDNS services out there, but I like DuckDNS. It’s free (or you can choose to donate), easy to set up and has worked flawlessly for me for years.

    • Mordikan@kbin.earth
      2·
      1 month ago

      Yeah, you can’t just use wireguard directly on a home network depending on provider (CGNAT) and you can’t just switch providers as most providers are in a non-compete with other providers. So, Cloudflare Mesh or Tailscale is the best option for those.

    • dabe@lemmy.zipOPEnglish
      1·
      1 month ago

      I always get so close to just setting up wireguard and being done with it. I barely ever change the devices on my tailnet, anyway.

      I do have a couple friends on my tailnet to give access to some stuff, so that might be annoying to migrate. That and Tailscale handling all the other networking stuff I might not even know about like cgnat.