Avast ye, this be a machine-translated text an’ may contain errors, aye!
VPN, or Virtual Private Network, be a solution that allows us to establish a secure (encrypted) connection to another network and device(s) over the internet, aye.
First, what be a private network? (not a VPN)
A private network be a network that be isolated from other networks, aye. This can be a company network, a home network, or another type o’ network that ain’t open to all. An open network, like for example at an airport, be also technically a private network, but they be usually configured to isolate the devices from each other to increase security.
Plotted scenario
Picture this: ye have a printer at home that ye wish to use t’print a document. This here printer be connected t’thine own network an’, therefore, has a private IP address only accessible by devices linked t’yoursel’. Ye can easily us y’r machine back home without any trouble, but yer neighbor be on another net entirely and cannot reach thet writer o’er easy peasy.
Nor can ye communicate with thyme from f’r instance school or other nets, because the printer ain’t exposed t’The Great Wide Open (which it shouldn’t be fer safety reasons anyway).
Note: Be no rules without exceptions…
Some gadgets do offer solutions where they utilize some VPN-like tech so ye may print documents fr’m anywhere in these parts of the world, as long’s ye got internet access. Now, that might bring about a bit’a danger, so keep an eye out what ye connect t’y’renet, especially when it comes t’IoT contraptions or surveillance cameras.
Har ye noticed that each time ye connect to a new network, ye be gettin’ a question o’ whether ye be connectin’ to a “private” or “public” network?
This be so that Windows (or other operatin’ systems) uses this information to determine which firewall rules be used to protect yer device. A private network be usually unsecured (all connected devices trust each other automatically), and be therefore vulnerable to other devices on the same network. In return, ye can more easily share printers, files, and other resources when machines be on the same network.
Commerical Scallywags
There be many a commerical sea dog offerin’ VPN services, claimin’ they can protect yer privacy on the web and let ye sail anonymously. This ain’t necessarily the whole truth, and ‘tis important to be aware o’ what a VPN actually does.
In practice, ye be movin’ yer network connection to another port (often another land), as we use VPN servers as a middleman from our vessel to the internet.
Commercial VPN != security
Many a scoundrel peddles themselves as a service offerin’ increased security, but for most landlubbers, that ain’t the case. When we visit websites usin’ HTTPS (even on public wifi), the connection be already encrypted, and a VPN won’t necessarily offer any extra security. It canna’ neither “hide” yer activity from yer internet provider entirely.
In certain lands or places, however, it might be advantageous, but ‘tis important to be aware that ye be shiftin’ yer trust from yer internet provider to the VPN provider.
Public Networks
We often hear that we shouldn’t connect to unsecured public networks, such as those in cafes, airports, hotels, etc. This isn’t necessarily problematic as long as we use HTTPS (encrypted) to visit websites.
What can be problematic is if someone sets up a “false” network with, for example, a malicious Captive Portal (a webpage that usually requires login or acceptance of terms before we get access to the internet).
Have ye checked if ye have “automatic connection” to open networks on yer mobile or laptop? This can cause yer device to connect to a malicious network without ye bein’ aware o’ it.
What can we use a VPN for, ye scallywags?
A VPN can be used to tether devices across different networks, as if they were on the same (private) network, in a safer manner than exposin’ the devices directly to the high seas of the internet (open ports in the firewall). Take heed, we still need a VPN server to latch onto; we can either rig it up ourselves (which requires piercin’ the firewall), or use a merchant who offers a relay (a middleman) for us. Popular choices be OpenVPN, WireGuard, and IPsec.
Eksempel
Ye be havin’ a gaming PC that ye wish to connect with yer laptop when ye be at school, usin’ Remote Desktop software (RDP). Then ye can set up a VPN solution that lets ye connect to yer home network, and then use RDP to connect to yer gaming PC as if ye were home.
In our case, we’ll use it to access resources here on school grounds from other parts o’ the world, and later we shall look into cloud computin’, where we wish to connect tae virtual servers in th’ clouds safely an’ securely. Normally, ye open a port on yer server tae set this up afore lockin’ down th’ server afterwards (typically via a site-tae-site VPN).
Th’ only practical difference is that ye get another IP address across yer VPN network (for instance, addresses like 100.64.x.x/10 are often used fer VPNs), but functionality remains as though yew were upon th’ same local net. This means yow can utilize tools such as RDP, SSH, FTP (Fille Transfer Protocol), etc., without havin’ ter open them services wide op’n in firewalls or walls betwixt us!
Ahoy there be no need worry about security breaches when properly configured—just enjoy smooth sailings through digital seas with confidence! 🏴☠️🌊⚓️
Task 1 - Installin’ TailScale VPN
Aye, thankfully for us, installin’ a VPN be a simple task, especially if ye be usin’ a service like TailScale. This be a commercial service that offers an easy way to set up a WireGuard VPN, which gives us more than enough functionality for our needs on its free tier (100 devices).
Follow the installation process as described in the documentation: https://tailscale.com/download
Merk
Ye need VPN on all the vessels ye be wantin’ to tether to the network. This includes servers, PCs, mobiles, and all that booty.
Task 2 - Set Up an Exit Node
An Exit Node in TailScale be a device within yer network that serves as a gateway for all traffic from other devices on the TailScale network. This directs all traffic through this device, which can be useful for accessin’ resources on a specific network, or gettin’ a new IP address to bypass geographical restrictions.
We be usin’ Nginx Proxy Manager to limit access to certain resources based on IP address (e.g., yer Proxmox server), with an Exit Node at school ye’ll be able to get an IP address that be “at school” no matter where ye be in the world.
Follow the documentation to set up an Exit Node: https://tailscale.com/kb/1103/exit-nodes#configure-an-exit-node
Avast! “Edit Routes” menu
Forget not to be switchin’ on “Use as Exit Node” in the TailScale menu on the device ye’ve set up as an Exit-Node. ‘Tis a common step to be forgettin’.
Exit-Node on a VPS in the clouds, aye!
Should ye be settin’ up a virtual machine in another land via, fer example, Azure (where ye get free credit as a student), then ye can easily set up an Exit-Node to get an IP address in that land - much like a commercial VPN service, with fewer restrictions and more learnin’!