VPN (10)

• Cloudflare Tunnel (Cloudflare Docs) reference
  cloudflared outbound-only tunnels exposing HTTP, SSH and RDP origins with no public IP; free tier available
  Free Tier Reverse Proxy Self Hosting #
• Home - Easy RSA (easy-rsa.readthedocs.io) reference
  POSIX-shell X.509 PKI manager over openssl: multiple CAs, certs for OpenVPN and TLS peers
  PKI Shell Scripting TLS #
• strongSwan - IPsec VPN for Linux, Android, FreeBSD, macOS, Windows (strongswan.org) tool
  IPsec IKEv2 daemon with MOBIKE, NAT traversal and a plugin system; GPL, Linux through Windows
  Encryption Network Routing #
• Community Documentation (openvpn.net) reference
  Community Edition docs: setup, routing, ethernet bridging, hardening, key management, platform notes
  Network Routing Security Hardening #
• Docs · Tailscale Docs (Tailscale) reference
  WireGuard mesh overlay: access control, subnet routers, exit nodes, logging; no-cost personal tier
  Free Tier Network Routing #
• Headscale (headscale.net) reference
  self-hosted control server for a single Tailscale tailnet, aimed at hobbyists and small orgs; open source
  Homelab Self Hosting #
• sshuttle 1.3.2 documentation (sshuttle.readthedocs.io) reference
  Routes TCP and DNS through an ordinary SSH login, needing only Python on the remote host
  Network Routing SSH #
• Headscale (headscale.net)
  Self-hosted implementation of the Tailscale coordination server
  Self Hosting #
• WireGuard: fast, modern, secure VPN tunnel (wireguard.com) tool
  In-kernel tunnel with modern crypto, leaner than IPsec and OpenVPN; also on Windows, macOS, BSD, mobile
  Encryption Network Routing #
• OPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection. - OPNsense (OPNsense) tool
  FreeBSD-based firewall/router platform: multi-WAN, IPsec/OpenVPN/WireGuard, CARP failover, NetFlow reporting
  Network Routing Security Hardening #