Hacker News Reader

Nowadays I question the necessity of vpn overlay networks. Why not just serve QUIC/HTTP3/Iroh over the internet directly in your application? And use oidc/client cert for authn/authz

View on HN

I believe the main usecases for this is not requiring changing code, not requiring adding a reverse proxy in front of code I can't change, and "OSI"ish protocols (as in, not really TCP protocols - Remote Database Access, Oracle Net Services/Java Message Queues/X.500, LDAP/smb/ncacn_np).

Those days, rather that actual "vpn overlay", I use Tailscale myself mostly for the Tailscale Funnel - a somewhat stable, yet free arbitrary DNS and free reverse proxy termination of incoming data for anonymous users.

> Remote Database Access

Postgres also has TLS + oauth2 support

> rather that actual "vpn overlay", I use Tailscale myself

I actually already had tailscale in mind when talking about "vpn overlays" :D

Yes, you can also do it. VPN is just one of those applications to be honest. Think of it as relaying packets over iroh.

Reply on news.ycombinator.com