By far the best solution I've seen is wireguard. Easy to set up, super fast and secure. My little swarm of VMs, containers, and raspberry Pis is all meshed together by wireguard.

The only "hard" thing is that wireguard doesn't port forward automatically, you have to add an iptables rule. Took me 10 minutes to figure out how and now whenever I add a service I simply copypaste previous rules and add relevant ports...

Edit: plus once you set it up you also get to use it as a VPN for your devices.

Several of the tools on the list are based on WireGuard, and I think we'll continue to see other useful abstractions over it in the future. It's an excellent technology.

The main reason to use something other than WireGuard today is that it requires root to run, in order to change the network configuration, so you can't use it to tunnel out on machines where you don't have elevated privileges.

My workplace always had web-proxies and openvpn used to allow me to login at home to admin stuff if needed.

Now I imagined wireguard would be perfect for this, but alas its only UDP which will never work on this network, sadly.

Also my cell proider somehow makes wireguard impossible, not sure if they block UDP too.

I was also sad when zerotier wouldn't work through the proxies.

I know, I know, busting proxies is wrong. But for me using it between linux boxes on permanent connections works fine, but its a very small portion of what I want from my VPN.

In the end it turns out Home Assistant on a dyndns HTTPs site solves most of my access problems. Even ssh can be solved using it!

That's very cool, I've seen many requests for an open source self hosted ngrok around here. I'll take a deeper look at this a bit later. Good stuff, and thanks for the contribution!

Hey, just discovered boringproxy from your link. Looks like a really slick solution!

Thanks. It's not quite production-ready, but I do think it offers some unique features. There are reasons I decided to make it even after discovering 20+ alternatives that all do pretty much the same thing.

Seems to be hugged to death

    Get "http://localhost:36169/": dial tcp 127.0.0.1:36169: connect: connection refused

Weird, the initial traffic when I announced it on /r/selfhosting was bigger than this. Must have gotten in a bad state. Anyway, thanks, it's back now.

While that's not really clearnet, I quite like yggdasil for that: https://yggdrasil-network.github.io/2018/07/15/remote-access...

I didn't see it on your list. It isn't clearnet again, but so are others, such as Zeronet :)

The list isn't exclusively for any particular type of tool, as long as they're useful for self-hosting.