[sa-code]

I can recommend tailscale for creating private networks. It has a generous free tier and would reduce the attack surface considerably compared to ngrok

Better yet would be setting up your own wireguard instance and not relying on free lunches. But as far as free lunches go tailscale would be my preferred option

[bonsai_spool]

Head scale is a good middle option - it uses Tailscale’s DNS system but you are able to control your network as you would with Wireguard

[baq]

tailscale has a much better chance to work when you need it most. WireGuard is blocked by too much stuff.

[ffsm8]

Tailscale uses wireguard.

What it provides is a opinionated configuration management - which is admittedly great which is why I use it as well, but it's nonsensical to say tailscale works in places where wireguard is blocked.

You're likely just noticing the preconfigured nat traversal which tailscale provides and never set one up yourself, as you'd need a static IP for that and it's unconfigured by default.

[roflchoppa]

I’ve never noticed wireguard be blocked by something, have you experienced this?