Do I want privacy when I connect to my home VPN?

[space5 2]

Let's assume that I want to remotely access my home computers through home wireguard VPN from a place very far from my house.

I could connect to my house over the plain internet or a commercial VPN like AirVPN.

AirVPN is convenient because it provides dynamic dns, but it also adds overhead in the form of extra encryption and more latency. It adds a bit of privacy.

If I don't use AirVPN's dynamic dns and port forwarding, I have to set up another dynamic dns provider, but there are no extra encryption and no extra latency.

When I connect to my home VPN remotely, do I want privacy provided by a commercial VPN?

[OpenSourcerer 1442]

20 hours ago, space5 said:

When I connect to my home VPN remotely, do I want privacy provided by a commercial VPN?

In my opinion it'd be overkill, there is no real reason to do that.

[space5 2]

I still haven't decided whether I want to use dynamic dns on my home router or commercial site-to-site vpn connectivity providers which provide me with NAT hole punching and relieve me from dynamic dns.

I'm hesitant to use site-to-site vpn softwares because some of them can meddle with firewall. I have my own firewall rules.

[OpenSourcerer 1442]

Take the KISS approach – stay with DDNS. It doesn't need to be AirVPN, its DDNS implementation is specifically made for when you want to reach connected clients with a fixed name, such as for individual servers.
I've used nsupdate.info for years until I found a domain registrar offering seamless DDNS integration into my own DNS zones.

[space5 2]

If IP address changes, wireguard will not use the new IP address. yggdrasil may do, but I haven't tested yggdrasil with dynamic dns.

Tailscale, netbird, and netmaker work around wireguard's inability to keep track of changing IP addresses.

[space5 2]

It turns out that yggdrasil works well with ddns hosts because it doesn't cache IP addresses behind DNS names.

If my network becomes complex, then mesh vpn solutions like tailscale, netbird, and netmaker can help, but my network is simple at the moment.

[space5 2]

Apart from yggdrasil, there are also nebula, openvpn, and ipsec if I want self-hosted vpn that supports dynamic dns.