VPN
A Virtual Private Network creates an encrypted tunnel between two points, letting you access private resources securely from anywhere.
A VPN, or Virtual Private Network, creates an encrypted tunnel between two devices or networks. Traffic that passes through the tunnel is private and cannot be read by anyone between the two endpoints.
Why it matters for a home lab
A home lab running multiple services presents a challenge: how do you reach those services from outside the house without leaving ports open on the public internet? Exposing application ports directly creates unnecessary attack surface. A VPN solves this by making remote devices behave as if they are on the local network, without opening anything publicly.
VPNs also protect traffic on untrusted networks. When connecting to a home server from a public WiFi network, unencrypted traffic can be intercepted. A VPN prevents this by encrypting everything between the device and the home network.
Modern mesh VPNs
Traditional VPN setups route all traffic through a central hub, which creates latency and a single point of failure. Modern mesh VPNs take a different approach: devices connect directly to each other in a peer to peer arrangement, routing traffic along the most efficient path.
Tailscale is a mesh VPN built on the WireGuard protocol. It creates a private network, called a tailnet, across all enrolled devices. A phone, a laptop, and a home server can all share the same tailnet. Accessing the home server from the phone is then no different from being on the local network at home.