// Topic collection
23 entries in this category
// Fast route
If you are exploring materials on this topic, the next step can be the topics catalog, the homepage with work areas, or the service pages directly.
2026-09-22
Tailscale, cloud NetBird and ZeroTier are convenient, but network control in them remains with a third-party company: it verifies users, issues keys and access rules. If that is unacceptable — for security requirements, …
Read more2026-09-22
ZeroTier and NetBird are services for creating a private network between your devices over the Internet, main alternatives to Tailscale. All three solve the same problem: computers, servers and phones see each other by …
Read more2026-09-22
What is Tailscale Tailscale is a service that unites your computers, servers and phones into a single private network over the Internet. Devices get stable internal addresses and connect to each other directly using the …
Read more2026-09-22
Mesh VPN — is a private network in which devices connect to each other directly rather than through a single central server. A laptop, a home server, an office computer and a phone see each other by internal addresses …
Read more2026-09-22
Why a VPN client on the router Configuring a VPN on each device is inconvenient, and TVs, game consoles and smart home devices often don’t support it at all. If the router becomes the VPN client, the tunnel can be …
Read more2026-09-22
Why a VPN server on the router When you need to reach a NAS, cameras, a work computer via RDP, or smart home devices from home or while traveling, opening their ports to the Internet is dangerous. It’s safer to run …
Read more2026-09-22
A firewall, Fail2ban and CrowdSec respond to attacks that are already underway. An audit solves a different task: to find weak spots in the server configuration in advance — extra services, permissive SSH settings, …
Read more2026-09-22
Firewall — the first thing you set up on a new server, even before Fail2ban, CrowdSec, and auditing. Its job is simple: allow only the traffic needed by running services and drop everything else. The fewer open ports, …
Read more2026-09-22
Fail2ban protects each server individually: it only sees its own logs and doesn’t know that the same addresses attacked thousands of other machines a minute ago. CrowdSec solves the same problem — detect attacks …
Read more2026-09-22
Any server with SSH open gets scanned by bots within minutes after startup: they try common usernames and passwords, making thousands of attempts per hour. A firewall won’t help here — the SSH port must be open. …
Read more