Remote access back to home network

[bert64]

Hmm, I think you use the word "RDP" a bit loose here.

Usually RDP (Remote Desktop Protocol) means the proprietary protocol developed by Microsoft.

I do not think AnyDesk uses RDP protocol. Same for Teamviewer and Rustdesk.

Yes but only the first sentence was in relation to anydesk, probably could have been more clear..

 

[d3adc3II]

does that mean that those remote desktop software like anydesk is not secured also?

Yes, and ts fine for ts use case. Its not supposed to give the most secued way to remote, and we still need to use i anyways.

Look, traditionally software like AnyDesk, Teamviewer, RustDesk are meant for IIT Support to do quick remote session to users , for troubleshooting/ install something
For that purpose, Anydesk/Teamviewer and similar software is the best solution, there is no alternative method.
It behaves liike "streaming video" when IT support remote and do their work while users are watchiing , support finish , the session end.
Person A "anydesk" to person B's laptop, whatever peson A do is the computer still take it as operated by person B. In term of security, yes, not very secured, but it's perfect for the use case. ( quick support session).

So yea , if you heed reliable, secured to remote to somewhere regularly, you need to look for vpn or ztna like cloudflare, twiingate, netbird. Each of these service has unique pro and con too , but overall its still better than "streaming" rdp.

 

[Kegler]

I'm using cloudflare zero trust tunnel to my home network. I running NPM as reverse proxy to handle my sub domain. For those services you do not wish public to have access, u can use self sign cert.
From cloudflare zero trust, it's only pointing at my reverse proxy's IP.
I think it's pretty safe, I didn't notice anything unusual in my network.
I'm also running technitium DNS for internal DNS.

 

[xiaofan]

I am not using Netbird now. But the following seems to be a good guide if you want to self-host Netbird on a VPS.

 

[xiaofan]

Good one:

Kudo the above developer for the prompt response resolving the Tailscale Peer Relay issue i logged today ( https://github.com/GuNanOvO/openwrt-tailscale/issues/161 )

Refs:
- https://tailscale.com/blog/peer-relays-international-networks
- https://tailscale.com/docs/features/peer-relay
- https://sesamedisk.com/tailscale-peer-relays-troubleshooting/
- https://frichetten.com/blog/how-hotel-wi-fi-broke-my-tailscale-peer-relay/

 

[xiaofan]

Tailscale with Unprivileged LxC containers under PVE, now it is pretty simple to set up. Just tried it under a Debian 13 LxC container.
https://tailscale.com/docs/features/containers/lxc/lxc-unprivileged

 

[xiaofan]

Tailcat -- never tried this myself
https://www.xda-developers.com/tailcat-replaces-tailscale-without-account-bloat-exactly-what-needed/

 

[xiaofan]

I settle down with Tailscale after switching to SIMBA. With the Subnets option, I can access all device in the home network.

This is still a good solution for SIMBA (CGNAT without Static IPv4), or MR/VQ users who choose not to pay for Static IPv4 add-on.

For SingTel/WC ONR (not bridged) users who do not want to use port forwarding, it is also a good choice, including those who use Double NAT (own router in router mode behind the main ONR).