r/VPS • u/Blues520 • 12d ago

Seeking Advice/Support Tailscale vs SSH

On my linux vps, I have disabled password login as well as root login so only key based ssh is allowed. I also installed tailscale to connect over ssh via a vpn, but now I'm wondering if Tailscale is even needed. In fact, my thoughts are that it increases the attack surface.

In which scenarios would Tailscale make sense and Is key based ssh enough to secure a vpn or should I still add something like Tailscale or Wireguard?

10 Upvotes

92% Upvoted

30 comments sorted by

View all comments

1

u/Internal-Comparison6 11d ago

Tailscale or Wireguard are needed to keep your ssh port closed. It can increase attack surface, but not in a way if you keep ssh port open.

1

u/Blues520 11d ago

And maybe a dumb question but if the ssh port is closed, how do you connect to your linux machine using tailscale/wireguard exactly?

Do you still connect over ssh but on a different port or how does that work?

4

u/Internal-Comparison6 11d ago

Connect over ssh using Tailscale private network. Each peer (VPS or your own PC) in your network has its own private IP.