Skip Navigation

Why VPN tunnels are safer than opening a port on my router?

Hi!

I often read suggestions to use something like Tailscale to create a tunnel between a home server and a VPS because it is allegedly safer than opening a port for WireGuard (WG) or Nginx on my router and connecting to my home network that way.

However, if my VPS is compromised, wouldn't the attacker still be able to access my local network? How does using an extra layer (the VPS) make it safer?

35

You're viewing a single thread.

35 comments
  • I guess the VPN adds an additional layer of authentication. And of course everything is encrypted by default which might otherwise not be the case.

    Plus, with a VPN you can access multiple services.

    • Yep, VPN makes it easier to access different services. Connect once, open anything you want in the local service. But I can set up WG without a VPS. To me that extra layer seems unnecessary.

You've viewed 35 comments.