Taasz/Woof

Pangolin would work, it’s still wireguard underneath but with a webUI to set up things and simplify it. It’s fairly easy to install on your server with their docker compose examples.

Yeah from a performance and safety standpoint I don’t think there’s much difference. There is some argument that repair parts availability might be worse with Chinese vehicles, but the usual domestic manufacturers are also actively hostile to repairs now anyway so I don’t know how different that will really be.

The propaganda of “Chinese vehicles are cheap and dangerous” only works when people don’t have the product in front of them.

Plus they’d have to pass whatever requirements in the US to be sold, the same ones that the ‘domestic’ manufacturers do.

What does these “tunnels” actually add?

Ease of deployment / time savings generally. You can certainly do it yourself with wireguard and a reverse proxy.

Self hosted alternative is buying a static IP from your ISP I suppose. Mine is an extra $5/mo which is eh, but I’m not paying for a VPS.

Performance on opnsense is fine for anything you’ll be doing at home, so I wouldn’t factor that into your choice.

Features on opnsense are probably better, just due to all the packages you can install.

Do you prefer being 100% in a CLI all the time? If not I’d say opnsense, the GUI certainly makes things a lot easier when you’re not fully familiar with something and spending every day interacting with it.

This really seems like it’s just a way to get DRM onto printers to stop people from printing replacement parts or ‘copyrighted’ materials.