Hacker News Reader

If you use Wireguard only to route to/from to a central hub that has a static IP address then what you have is perfectly fine.

Tailscale works well for situations where you have lots of roaming devices that perhaps want to talk to each other as well as to central hubs or you want to gate all of this behind some kind of SSO.

View on HN

You don't need a static IP. Just a name. I use wireguard on all of my devices connecting to the wireguard host on my router by name.

Yeah. My MikroTik router comes with a free DDNS service, for example

While you're correct, it's worth keeping in mind that Wireguard only looks up DNS names when the tunnel is started.

If your remote endpoint address changes, the only way your client will find out is either if you restart the tunnel on the client device by hand, or in the lucky case, if the remote endpoint happens to send some data to you at the right time while your client is still hopefully reachable at the same IP+port, which may not be a given behind a NAT if a port mapping times out from inactivity or if it changed network in the meantime.

Reply on news.ycombinator.com