Тёмный

the END of VPNs?! 

NetworkChuck
Подписаться 4 млн
Просмотров 1,2 млн
50% 1

Ditch your VPN and start using Twingate (it’s FREE): ntck.co/twingate
Want to try the teams and business plan? Use my coupon codes to get 3 months FREE:
🚀Monthly Plan: NETWORKCHUCK-MONTHLY
🚀Annual Plan: NETWORKCHUCK-YEARLY
Say goodbye to VPNs for remote access! I've ditched my VPN because they're slow, complicated, and insecure - not to mention outdated! I needed a better solution - one that's lightning-fast and gives me granular control over user access. Enter Twingate, the zero-trust remote access solution that will revolutionize your remote connectivity experience. In this video, I'll guide you through setting up Twingate on your home or business network FOR FREE in just 5 minutes. Don't miss out on this game-changing technology!
Twingate Docs (deep-dive into how it works): www.twingate.com/docs/how-twi...
SUPPORT NETWORKCHUCK
---------------------------------------------------
🚀🚀Join the Academy: ntck.co/NCAcademy
☕☕ COFFEE and MERCH: ntck.co/coffee
💪💪 Try the NetworkChuck Cloud Browser: browser.networkchuck.com
**Sponsored by Twingate
FOLLOW ME EVERYWHERE
---------------------------------------------------
Instagram: / networkchuck
Twitter: / networkchuck
Facebook: / networkchuck
Join the Discord server: bit.ly/nc-discord
AFFILIATES & REFERRALS
---------------------------------------------------
(GEAR I USE...STUFF I RECOMMEND)
My network gear: geni.us/L6wyIUj
Amazon Affiliate Store: www.amazon.com/shop/networkchuck
Buy a Raspberry Pi: geni.us/aBeqAL
Do you want to know how I draw on the screen?? Go to ntck.co/EpicPen and use code NetworkChuck to get 20% off!!
fast and reliable unifi in the cloud: hostifi.com/?via=chuck
---------------------------------------------------
Twingate is an alternative to zerotier, a global provider of software-defined networking and offers secure remote access solutions.
Twingate is an alternative to zscaler, a cloud-based security platform that provides zero-trust access solutions and internet security services.
Twingate is an alternative to Perimeter 81, a provider of cloud-based network security solutions, including zero-trust network access.
Twingate is an alternative to Pulse Secure, which provides software-defined secure access solutions and offers zero-trust access technology.
Twingate is an alternative to OpenVPN, an open-source VPN technology provider that offers secure remote access solutions for businesses.
Twingate is an alternative to Cisco, which offers zero-trust solutions that provide secure access to resources based on context and policy, leveraging multi-factor authentication and endpoint security.
---------------------------------------------------
#zerotrust #twingate #vpn

Наука

Опубликовано:

 

27 апр 2023

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 2,4 тыс.   
@reloadfast
@reloadfast Год назад
NEVER, and I mean NEVER, rely on a third party for access into your own network. If it's not selfhosted, there is nothing secure or reliable about it.
@NetworkChuck
@NetworkChuck Год назад
watch the rest of the vid, look at how they handle authentication. Twingate REQUIRES third-party auth (google, github...etc) for you to connect to a resource. It's not self-hosted, but it's also not as "managed'" as you might think.
@jeinnerabdel
@jeinnerabdel Год назад
@ mmm... All I hear is "less risky, but risky nonetheless" the thing is that even law enforcement could have full access to your local network. Not that I hide anything but it's the basic principle of "don't leave your doors open to anyone" This is literally the equivalent of turning off your firewall.
@xellaz
@xellaz Год назад
Yea, I also gave twingate and tailscale a pass. I don't want to rely on any 3rd party when accessing my network. 😗
@RedcubeX24
@RedcubeX24 Год назад
​@@NetworkChuck this wouldnt pass ISO 27001 in my book
@natenate3292
@natenate3292 Год назад
Yeah this might not be a great option for your personal network, but I think for small businesses it’s hard to beat.
@Ex_impius
@Ex_impius Год назад
Someone needs to make an open source version so we can host the controller ourselves. I dont like twingate being in control of the controller
@carlostrudo
@carlostrudo Год назад
Agreed. Zero trust also means don’t trust controller when not self hosted.
@nobodyshomeuk
@nobodyshomeuk Год назад
ZeroTier is a good alternative to this. I think the only thing the OpenSource version lacks is a GUI, so if you're fine with CLI, it's a good option.
@JeremiahK
@JeremiahK Год назад
@@nobodyshomeuk I selfhost zerotier and use ztncui for a UI and it works great.
@TechnologyGeek862
@TechnologyGeek862 Год назад
Zerotier or nebula would be go to option for this.
@kwith
@kwith Год назад
As soon as I heard "the controller is managed by Twingate, its in their cloud" that was a solid NOPE for me. If I don't have full 100% self-hosted control then that's a solid pass for me.
@mr.alkenly889
@mr.alkenly889 11 месяцев назад
I love that everyone is worried about it not being self hosted, it gives me hope
@DjTonioRoffo
@DjTonioRoffo 10 месяцев назад
a lot of times, self hosted is not a secure as one might think. Errors in set-up, old firmwares, etc, etc.
@ShaferHart
@ShaferHart 8 месяцев назад
@@DjTonioRoffo but it's in your control: if you fd up that's on you. Trusting a centralized solution like this and you could find yourself at the mercy of "show me the man and I'll show you the crime" by simply saying "the wrong thing" on the internet and activating the "online safety bill" on you.
@DjTonioRoffo
@DjTonioRoffo 8 месяцев назад
@@ShaferHart are you in the reality of today's IT solutions? Do you run everything locally? It's just not possible anymore.
@BillAnt
@BillAnt 8 месяцев назад
Nowadays most websites are already end to end encrypted via HTTPS/TLS similar to VPN's, therefore double encrypting the data is a waste of time and VPN fees, with slower speeds and higher latency. The only thing it's good for is hiding your location, but even a simple proxy can do that for about half the cost with a simpler setup, higher speeds, and lower latency while still encrypted via HTTPS/TLS. Also, a VPN server is a single point for an attack by bad hackers or state actors since all your connections are going through the same server.
@alx8439
@alx8439 7 месяцев назад
@@BillAnt fully agreed. Using VPN as a safety measure to prevent a man-in-the-middle from listening your HTTP traffic is pointless as there's no pure HTTP traffic left nowadays. But it is just a single use case for VPN, very narrow one which got pedaled because of all those "Secured VPN service providers" wanted to sell their services. Why VPN as a technology appeared, first of all, is to connect together in a virtual private (and secured) network various hosts scattered across the globe, but all having access to internet.
@uniufugushiku
@uniufugushiku Год назад
I know that Twingate sponsors this video, but I really value having control over my data. Therefore, I prefer Pritunl, because they have self-hosted option. Chuck, I think you should consider making a video about it. Congratulations on your video! P.S.: The benefit of the Twingate provide is the endpoint controls.
@bensavage6389
@bensavage6389 3 месяца назад
why not tailscale
@dragoooon9561
@dragoooon9561 2 месяца назад
@@bensavage6389it’s just WireGuard which is still a vpn
@rafal9ck817
@rafal9ck817 Месяц назад
@@bensavage6389same issue with controller ?
@JeffGeerling
@JeffGeerling Год назад
I wonder what that top secret project was... Also your editors did a pretty big brain move saving you money by downloading more RAM!
@superintendent1152
@superintendent1152 Год назад
hello there, funny to see you again
@MD2389
@MD2389 Год назад
Oh nothing, he's just building his own Stargate in his basement! ;)
@BeNtOoOoOo
@BeNtOoOoOo Год назад
Jeff, save us... Explain the guy this is just a fancy VPN controled by a 3rd party with ACL! xD.
@moon.walker
@moon.walker Год назад
Here before this blows up
@nohay4549
@nohay4549 Год назад
What is your opinion? Waiting for on your channel
@Charles-ow3fo
@Charles-ow3fo Год назад
Hey Chuck!! I have been watching this channel for a very long time and since I've started watching this channel, I started studying for certifications. I have obtained A+ and Network+ but now I am ecstatic to share that I just passed my CCNA!! You and this channel were a massive part of that! Just wanted to say thank you! I love the content and I look forward to a whole lot more to come from you I'm sure.
@aldarion2222
@aldarion2222 Год назад
Congrats man! :) I'm studying myself for the CCNA. Is there a reason why you started with Network+ before CCNA? I was under the impression that both certs broadly cover the same networking concepts, the difference being that CCNA focuses on Cisco solutions and is obviously more hands-on with the CLI configuration. Am I missing out by not taking Network+ before completing CCNA?
@Charles-ow3fo
@Charles-ow3fo Год назад
@@aldarion2222 I don't think your missing out. I took Network+ because I was new to everything and honestly it couldn't hurt in my case. It really made the transition to study for the CCNA much easier because I already knew most of the concepts of networking, now I just had to focus on CLI configurations and the different protocols associated with CCNA. It's my understanding too that CCNA carries more weight in the job market than Network+ but we shall see. I've added my CCNA cert to my resume and now going on the job hunt. Good luck with your studies!
@reinlind2560
@reinlind2560 Год назад
Looks like very long add...
@SuperVexal
@SuperVexal Год назад
@@Charles-ow3fo What did you use to study? I want to get both certs this year I have some experience just want to reinforce, and congrats on CCNA!
@Charles-ow3fo
@Charles-ow3fo Год назад
@@SuperVexal Thank you! I was on Udemy quite a bit and I purchased the official cert guides. I also attended night classes at a tech school to get more hands on but packet tracer is great for simulating a network if getting hands on is not an option for you.
@fordsrmaster
@fordsrmaster 4 месяца назад
Exciting stuff Chuck! I can't wait to get home and try this over the weekend. You make learning fun. Thanks.
@Steaky1300
@Steaky1300 5 месяцев назад
Thank you so much for showing me this, I was looking for an easy and secure way to access my server, (which isn't in my house) and this does it just fine.
@jeronimojimenez5365
@jeronimojimenez5365 Год назад
Yep, 0% trust on users, 100% trust on TwinGate. I've kinda heard of this concept a couple of times. It sounds interesting as tech though. Nice video as always :)
@jagdtigger
@jagdtigger Год назад
0:49 Thats not a VPN weakness but a lack of OPSEC on your part. 1:36 Zero trust? Doubtful. Basically you allow in a 3rd party onto your network because of the cloud control plane. BTW on the backend they use good old VPN protocols. 1:44 You can do that without VPN or this no-name sw vendor, its called "having proper firewall rules". 1:57 Gimmick, simply having an AV and fw rules doesnt mean the machine isnt infected or boned by a hacker.......
@agdevoq
@agdevoq Год назад
Holy grail of an answer :)
@The-Cat
@The-Cat Месяц назад
underrated comment!
@goldenears9748
@goldenears9748 Год назад
You have solved problem I've had for 12 months. Thanks so much xx
@albertogiacomini7276
@albertogiacomini7276 3 месяца назад
Thank you for let me know about these solution finally resolved 3 year problem to connect my home via starlink
@dominolastley1754
@dominolastley1754 Год назад
What happens when Twingate's cloud/business inevitably gets hacked? What are the safeguards to ensure the hackers don't get access to everything we've provisioned access to using Twingate? I, too, would be much more excited if I could run an open source version so that I could host the controller and not be dependent of Twingate. Thanks much for the great content.
@gatolibero8329
@gatolibero8329 Год назад
Yeah, and it will get hacked. These types of services are prone to hacking because of the type of service it is...a back door to your network.
@swallowedinthesea11
@swallowedinthesea11 Год назад
@@gatolibero8329 Chuck has 3 million subs! I believe him rather than a random with zero subs! Edit: Please stop computer Internet bullying me 🙁
@nathandouglas7821
@nathandouglas7821 Год назад
@@swallowedinthesea11 that is not always good logic to go by my friend... @Gato Libero is NOT wrong in anything they said. Not to mention the fact that this video watched like one giant Ad rather than an informational video. You should wonder why he tried to give you a legit reason as to why he made this video and uses the product while simultaneously advertising the very same product in an ad spot which he also supposedly came across by chance LMAO Yea OK
@cxl520
@cxl520 Год назад
I find the solution could work better if they create an account with the public and private key authentication method to sign in, or they come up with something that they had hosted for us, but they cannot access it, only we had a key to unlock it.
@lorcster6694
@lorcster6694 Год назад
@@swallowedinthesea11 the only problem is, they paid him to advertise it
@t0uchme343
@t0uchme343 Год назад
I use zerotier myself. It doesn't have the granular automatic control but it works for me and my (somewhat extended) family. I even use it to connect my cloud oracle servers with the rest of my network.
@andreasMou123
@andreasMou123 Год назад
Zerotier is a godtier product! Free to use, setup in 5 min, no need to forward a single port in your insecure home router, and the speed is similar to LAN speed. Cant recommend that shit enough!
@farivart
@farivart Год назад
Like everyone else, I'm concerned too because it's not open source. An important point and strength of most self-hosted VPN applications are that they're open-source, so when you say "Managed" and a third-party server comes in between, personally, no matter how legit and reliable that company is, it's a red flag for me.
@chriscoyne5577
@chriscoyne5577 4 месяца назад
Same here
@franssjostrom719
@franssjostrom719 2 месяца назад
Great video and great product! Love how enthusiastic you are talking about it haha
@congenio
@congenio Год назад
I think the bit about the client and connector talking directly to one another is technically incorrect. While the relay knows which IPs and ports the client and connector use (after NAT), you cannot have them connect to each other. That is because the NAT routers will only accept packets originating from the relay for those ports. So, in order to connect client and connector, the traffic has to be routed through the relay as a proxy. And while that traffic is probably encrypted, all of this is controlled by non-open software provided by Twingate. Thus, you essentially have to trust that Twingate is a. "not evil" and b. "stays secure". Also, the ressources that are being exposed are controlled via a cloud instance ("controller") and also, who may connect to them. You essentially delegate control over what can be accessed to Twingate, putting a remote control to your network in their hands (aka "firewall piercing"). Surely, nothing to worry about, huh?
@robertb6276
@robertb6276 Год назад
VPN is perfectly securable... VPN connection should be to a firewalled VLAN. Then you can specify ACL on that VLAN that controls what the users can access.
@lorcster6694
@lorcster6694 Год назад
ACL on that VLAN? Can you explain what that means? What is ACL?
@EvanIIRC
@EvanIIRC Год назад
@@lorcster6694 access control list. Basically firewall rules
@lorcster6694
@lorcster6694 Год назад
@Evan ah OK thanks.
@Fernando-nz3gm
@Fernando-nz3gm Год назад
Spoken like an IT Guru.
@robertb6276
@robertb6276 Год назад
@@lorcster6694 Access Control List
@shaundelorez
@shaundelorez Год назад
Good Sir, you may have just solved a current issue my company is facing. The existing firewall doesn't allow granular rules for port forwarding (only forward IF FROM . This should help things SO much. Thanks for staying on top of things and sharing!
@tbits01
@tbits01 Год назад
This is awesome!!! Can’t wait to give this a test drive. The video was so fun to watch thanks for always providing such informative entertaining content! 😀
@perryuploads776
@perryuploads776 Год назад
Nice technology. I wonder if this protocol will be abused. When a PC is behind NAT , a home router uses Port-NAT. A statefull firewall "expects" data on the inbound port. Since the TwinGate client installed on a PC behind a NAT. It is basicly a backdoor relayer (SOCK5 proxy) in your LAN environment. Why? External users can connect to other devices in your LAN. Oh well, it is a cool tech, but I hope IDS/IPS firewall can detect this kind of traffic in business environment. A employee can easily make backdoors in your network if you are not carefull. Thanks for the clip and explanation.
@mojmirvajgel5956
@mojmirvajgel5956 Год назад
Exactly my thoughts...no trust to VPN, but install a third party backdoor is ok.
@flaminbutt
@flaminbutt Год назад
It’s running on higher layers, so just block the process from running and you’re good.
@lukewoodside9420
@lukewoodside9420 Год назад
Your comment is the very reason we segment networks using subnets. Keep all the critical infrastructure off the access network.
@lukewoodside9420
@lukewoodside9420 Год назад
@@flaminbutt Issue is that's fine until the bad actor comes in with a raspberry pi or something and plugs it into an ethernet cable. Now .,... proper network security should prevent that (network segmentation, mac address port filtering, etc), but the potential is there for an improperly secured network.
@lukewoodside9420
@lukewoodside9420 Год назад
@Brent Burroughs Issue is they tried that at my university, stunnel got around it with relative ease.
@autohmae
@autohmae Год назад
Great to see someone do this with QUIC, it's been on my mind for over a year now, their is an IETF workgroup working on proxy support and QUIC. But routing all my traffic through someone else, not so happy. Also: lots of VPNs just give you the subnet and nothing else, not routing everything through it. yep, split-tunnel And lots of people set up a firewall on a VPN concentrator to control what people can reach. 21:20 very common among enterprise VPN vendors, I've never cared for it, but I guess good to see such features added by a company with a free option.
@mattdaryos3871
@mattdaryos3871 Год назад
Great video Chuck. I mean I love this product already. Couple weeks ago, we deployed something pretty similar to Twingate and was called Checkpoint Harmony Connect. It pretty much did the same thing and I had to set up a docker inside our internal vm farm. You’re awesome because now I understand how it works. Cheers man and keep these videos up
@BoudoirTv
@BoudoirTv 2 месяца назад
Thanks Network Chuck… great explanation, easy to understand… thanks for helping me stay up to date!
@arcataslacker
@arcataslacker Год назад
That looks like a great piece of software, but I am becoming increasedly concerned with amount of network infrastructure that is beginning to operate on closed source SaaS models.
@breakfast7595
@breakfast7595 Год назад
SaaS, nore like SuuS. I'll see my way out...
@deality
@deality Год назад
This is a saas model don't go for it
@DjTonioRoffo
@DjTonioRoffo 10 месяцев назад
Oh, that ship has sailed a long time ago. Every business and their granddad's are running at least part of their stuff in Azure, Google, ... all running on a few dozens of highly concentrated server farms. The decentralized internet is gone.
@ShaferHart
@ShaferHart 8 месяцев назад
@@breakfast7595 nah bro I'm stealing that lol
@cxdeblue6055
@cxdeblue6055 Год назад
A split tunnel SSL VPN is a way better option - entirely self hosted and self configurable, and only the traffic that needs to go over the VPN does so (this negates the "everything goes through the VPN device" point that Chuck makes, only specific traffic that you define will go through it)- and their are products out there for this that also have ACLs etc. - I hate the idea of this going through a 3rd party service/server to access a private network.
@NetworkChuck
@NetworkChuck Год назад
Your traffic (data) isn't going through Twingate. They simply facilitate a peer-to-peer connection.
@wildblack1
@wildblack1 Год назад
@@NetworkChuck Great job trying to advertise the product more even though you know it is bad. Do you get more money if more people sign up for the service or something.
@RandomBitzzz
@RandomBitzzz Год назад
@@NetworkChuck Yeah, I thought you explained NAT traversal really well.
@GottaHache
@GottaHache Год назад
Pretty sure it’s just point to point with a pinned cert on the TLS tunnel. Also I’ve played around with split tunnel configs for all sorts of VPNs and Twingate is so much easier.
@DanielLuechtefeld
@DanielLuechtefeld Год назад
For some business use cases, SaaS infrastructure is an acceptable risk.
@MarkYork85
@MarkYork85 8 месяцев назад
Man, what a discovery this has been. Excellent video!
@webmaster06mt
@webmaster06mt 4 месяца назад
I needed this so much. thanks a lot
@devon-crain
@devon-crain Год назад
The pieces of this I did understand were so cool to me that I feel inspired to really dive in and learn substantially about networking. Thanks for all you do!
@AdrianPatten
@AdrianPatten Год назад
Back in my day (2004) , we used Hamachi. It 'kinda' did the same thing without the extra layers of security. Then it got sold off to Logmein (say no more) Great to see there are plenty of decent alternatives. Another great video Chuck, thankyou!
@wildblack1
@wildblack1 Год назад
It's not a great video its just an ad,
@heavyq
@heavyq Год назад
I used Hamachi to allow people to connect to the private World of Warcraft server I used to run way back when. Super easy to get people connected.
@ambostralian
@ambostralian Год назад
Hamachi... Now that is a name I haven't heard in a long time.
@Baulder13
@Baulder13 Год назад
@@heavyq I remember trying to play Age of Empires 2 over Hamachi. Every single time we'd make it way into a game then disconnect and corrupt the game.
@unknown-otter
@unknown-otter Год назад
We played Minecraft on hamachi when we were like 12-14! There also was Tungle
@Void12398
@Void12398 11 месяцев назад
I'm rewatching this video cause I just passed my first Cisco certification and honestly want to thank you cause throughout all your content, you touch so many subjects that all were such great help to understand networking. So thanks man!
@TheFlatronify
@TheFlatronify Год назад
Great idea to use a proprietary service 'never heard of' as the single point into every aspect of your network!
@BMW750Ldx
@BMW750Ldx Год назад
🤣
@dangbro
@dangbro Год назад
Almost everything is proprietary and everything allows data collection for law enforcement and for marketing. The whole security depends on the proprietary firm but anyway insiders can access anything on your device.
@deality
@deality Год назад
​@@dangbro not everything
@dangbro
@dangbro Год назад
@@deality 'Almost everything ' was the key words I used.
@crooker2
@crooker2 Год назад
Your production values are killer. The live overlay is amazing. Would love to know how you do that. :)
@pierrevillemaire-brooks4247
Thank you for this lesson in IT and how internet protocol is evolving 🙂
@VictorHPereira
@VictorHPereira Год назад
My brother, THANKS for sharing this USEFUL SOLUTION! =) I'm gonna try it myself TODAY
@93ksj
@93ksj Год назад
The thumbnail is pure art 😂
@ItsTonyAldo
@ItsTonyAldo Год назад
This is almost like a middle ground between cloudflares secure tunnel and tailscale. Thanks for actually explaining how this works.
@notreallyme425
@notreallyme425 Год назад
I was wondering about the difference between this, Cloudflare tunnels and Tailscale. The three of these seem pretty much the same to me - at least on the surface. Would like to know the differences.
@ItsTonyAldo
@ItsTonyAldo Год назад
@Not ReallyMe Tailscale uses wireguard, cloudflare uses http/2 and what network chuck mentioned uses QUIC. Cloudflare can use QUIC if you'd like but this one does it out of the box and is a little easier to configure. Tailscale let's you segregate your traffic if needed so not everything needs to touch your network. All 3 seem to be great to be honest. It comes down to what meets your needs.
@OnlyTrey-zt2cg
@OnlyTrey-zt2cg Год назад
They all have pretty good free tiers so just try them out to see what works better. Personally I find Twingate to be the easiest to use for narrow access to multiple different networks like Network Chuck describes in the video
@GottaHache
@GottaHache Год назад
Yeah Twingate looks kind of like the Goldilocks option for me. Really easy to set up but has way more complete controls than Cloudflare and Tailscale.
@Shajirr_
@Shajirr_ Год назад
I know how this will go. At some point they will just remove the free tier entirely. Happened to like 5 different services I used in the past. First they allow you to sign up for free, then remove the free tier when you rely on their service, so you either have to pay up, or quickly search for a replacement.
@Ellington_Industrial_Arts
@Ellington_Industrial_Arts 8 месяцев назад
Truth... that business model grinds my gears.
@organicalgorithms
@organicalgorithms 6 месяцев назад
I guess that’s where the coffee comes in. just want to know what equal parts meth and angel dust I need to procure 😌
@rushicash
@rushicash Год назад
A David Bombal and a NetwrokChuck video on the same day? TODAY IS MY LUCKY DAY
@OnlyTrey-zt2cg
@OnlyTrey-zt2cg Год назад
Hate VPNs and love Twingate!!! Glad the word is getting out
@SuperHumanJeremiah
@SuperHumanJeremiah 6 месяцев назад
I loved the intro video music, was on point bro 👌
@talisa4567
@talisa4567 Год назад
Awesome Chuck! THANK YOU, thank you, Thank You!
@ricos.5514
@ricos.5514 Год назад
Chuck. Thanks love the video. ❤ maybe I missed it but how much better/different is this compared to a cloudflare tunnel?
@TheWayManREAL
@TheWayManREAL Год назад
Not going to lie, I did not expect that ending haha that got me good lol. WHAT ARE YOU DOING!? Videos are always awesome from you man. My personal opinion on VPNS: I majored in cybersecurity and I knew from the get go, you are only as secure as the product you use nothing more, and nothing less. This is good for probably 80% of the world. But the other 20% I feel are like me and never agreeed to it. My favorite way to access stuff from other places is 2 step VPN through a firewall. Yeah it can still get session hijacked (remember the golden rule, you are only secure as the product you use). But at the end of the day I technically am MFA'ed to my VPN and I can control what user through my dedicated VPN can use. I think I should mention that I use sonicwall, and I am not talking about your commercial VPN's I am talking about a business level one which is completely different than what most at home users will use.
@IanBPPK
@IanBPPK Год назад
I was thrown off the beginning of the video when he mentioned a VPN letting remote clients access the entire network when you're able to restrict client to client and subnet to subnet connectivity using firewall rules and ACLs. Additionally MFA can be achieved with DUO at no cost for lab users.
@cignul9
@cignul9 7 месяцев назад
Great review. Couple of thoughts. It's not zero trust if you're proxying with a third party. It's third-party trust at a minimum. More likely, it's third party (Twingate) plus whoever else is listening at the third-party relay; think NSA. Also, Twingate software appears to be closed-source. Again we'd have to trust that Twingate's software does only what they claim it does. That's a big camel to swallow if you're security conscious.
@user-jo2vg3fj6u
@user-jo2vg3fj6u Год назад
Thank you for having me discovering this LOVELY tool ! Amazing ! Easy, secure, fast !!!
@Permafry42108
@Permafry42108 Год назад
this and talescale are good for me because while i could set up a true vpn through to my nas on my own with playing with my firewall and such. i know that my family probably can't or won't. Having the ability with tailscale to share connection access to my nas from anywhere, with just making an account and having clicked the invite link i sent them, is FAR more intuitive for most home users than the alternatives i've tried to convince them to try in order to access my jellyfin through my nas;
@ebcradioshow
@ebcradioshow 8 месяцев назад
Thanks for this :D great stuff
@LivinDadLife
@LivinDadLife 5 месяцев назад
Threw away VPN after fighting with configuration issues for months and this works so much better!!
@johnsmith8981
@johnsmith8981 Год назад
I'm genuinely surprised that you don't already have a VPN setup. Also, for the concern about them having full network access can't you just use subnets to segregate the data and have the VPN only get you into a specific subnet? I mean, at my job the VPN I use won't let me access stuff in the accounting network.
@wildblack1
@wildblack1 Год назад
He probably does have a VPN set up. This whole video is just a big ad anyway,
@BDTech-yi6ub
@BDTech-yi6ub Год назад
Subnets don’t restrict ports. Even if you are restricted to a certain subnet you’d still have access to all ports. He references that. A VPN setup like that is far more complex. Plus you often can’t specify firewall rules on a per user or group basis. For example, sales can only access tbe inventory system on port 443. But IT users can access it on 443 and 22. It’s a simple concept but either impossible, difficult or expensive to implement in a traditional VPN.
@OnlyTrey-zt2cg
@OnlyTrey-zt2cg Год назад
@@BDTech-yi6ub exactly - you can do *some* of these access restrictions by doing a bunch of network munching but Twingate makes it so much easier.
@GottaHache
@GottaHache Год назад
I think the whole point of something like Twingate is that you don’t have to go through all the work of creating separate subnets, which are kind of a pain to set up and really hard to set up granular access. You can basically have one big flat network and then Twingate acts as a segregation layer. Pretty cool networking tech IMO
@miss_sapphire
@miss_sapphire Год назад
​@@BDTech-yi6ub Sophos XG you can do policy based routing for users and groups
@Shamysoza92
@Shamysoza92 Год назад
This is like magic! I struggled a lot with trying to make this work using FTP or a Static IP address and the provider wanted to charge me a lot more for that service. As some one who is not experienced in networking stuff, this worked like a charm. I installed Docker to my WD Mycloud EX4100 and launched it in there, so no more annoying webpages to upload files or download them, I can just map the route directly to windows and its fantastic! Thank you very much for sharing this!
@customautomation3230
@customautomation3230 Год назад
Seems great sollution for remote access to automation devices like PLC controllers, i didn't try it yet but will do asap. Thanks!!!
@madseanmacgregor788
@madseanmacgregor788 6 дней назад
I really like these videos youre making... I would really like to sit down and talk about all this with you because it hits home strangely with everything thats been bothering me for the last 6 years or so and feel so far behind still .... need to ctch up big time... wiercd but funny cause just found an old chucke cheese token .... idk but you got all the knowledge im interested in ... thx chuck
@DerrickJones19
@DerrickJones19 Год назад
I love it when Chuck says something is easy, and then in about 60 seconds into the process my eyes start glazing over. 🤣
@T.me_NetworkChuck0
@T.me_NetworkChuck0 Год назад
Hey there,👆🏾 leave me a message Thanks for commenting 💚
@dh2032
@dh2032 Год назад
same here too about 5 minutes in for me of none stop keyboard tapping I like batch and script files, 🙂
@JustSuds
@JustSuds Год назад
This is absolutely NOT zero trust. In this scenario you have to trust twin gate and there are multiple points of failure. First is the fact that this is closed source software, if TG get compromised or otherwise do something untrustworthy, they can push a malicious update to this software and you would never know. This requires you to trust them. Another point of failure is the fact that TG have the auth tokens. So this requires you to trust them not to leak those. Calling this Zero Trust is damaging your credibility.
@williambailey3480
@williambailey3480 7 месяцев назад
I've been on a NetworkChuck geek binge today. Thanks Chuck!!
@renends7615
@renends7615 Год назад
Your channel always has excellent videos, it helped me in critical moments and in some cases, I managed to predict and eliminate catastrophes before their birth. But this video is insane! Thanks!
@devmely
@devmely Год назад
While this solution lacks the necessary security measures for implementation in large-scale or business networks, I must admit its enticing simplicity in terms of setup and operation. As someone with over a decade of experience as a network engineer with a proficiency in software development as well, I find myself pondering why I hadn't conceived of such a smart and user-friendly solution earlier. 😊
@julianaufdie1
@julianaufdie1 Год назад
I love your videos ❤
@johnlegend1360
@johnlegend1360 9 месяцев назад
Also need to hit the notifications bell. I was subscribed for months and just realized I have to turn on notifications.
@yy90716
@yy90716 Год назад
This sounds like a great solution for those like me who dont have access to the router admin pannel and port forwarding on the nas network. Cant wait to try it out.
@JoeyGero
@JoeyGero Год назад
Network Chuck must somehow be listening in to my device or something Hahaa. A couple weeks ago my company asked me to look into ticketing software.. he released a video on how to create your own. I just got asked about getting a VPN to use and then he releases this video. Love your videos man haha
@eightios5138
@eightios5138 Год назад
Could you make a video on how to host your own VPN locally, and as simply as possible?
@carlosguzmansalcedo5650
@carlosguzmansalcedo5650 6 месяцев назад
Clear and easy! Thank you very much
@dsngjoe2
@dsngjoe2 Год назад
This is a looks like a great product. Must do some testing using this but I do understand that not everything is under your control.
@stevedixon921
@stevedixon921 Год назад
Interesting. I've been getting by with wireguard via my current firewall app for my remote access needs. My needs are very simple though, since they are just for myself. I find Wireguard is very fast at establishing connections, certainly faster than traditional ipsec or ssl vpn's, though it really needs work on the UI and could use a kill switch or toggle option. I'd certainly consider twingate if I could host my own controllers (the part that lives outside my firewall). With the way some companies change their policies regarding their customers I'd be wary of anyone having full control over the part in the middle that makes it all work. Sure, it is VERY convenient, but that puts them in a position of power to change the deal later without consent (insert clip of Darth Vader changing the deal here>. That and it is a single target for attack and a data breech would be a big problem (it stores info about your internal network, public ip's and your users after all). Something I'll bookmark for the future though.
@eriknorman7478
@eriknorman7478 Год назад
Thanks for this video! This was exactly was I was looking for for my home lab setup. 👍🏻👍🏻👍🏻
@BSpears
@BSpears Год назад
I'd like to see a video of you comparing Twingate to Cloudflare tunnels (zero trust, previously called Argo Tunnels). I've been using the latter for quite some time and it's nice not having to install a client to facilitate the split tunnel vpn connection.
@IMAS7512
@IMAS7512 Год назад
To be honest, i never ever understand what are you talking about but i always love to watch you describing your content ❤❤
@craiggrella
@craiggrella 11 месяцев назад
I am a networking novice, so I really appreciate your videos. They teach me a ton. I’m curious what you think about devices like firewalla. I got one recently and use its internal VPN with WireGuard. Seems to work okay, but curious if I”m missing something or not as secure as they like to say I am.
@IbizaStyler
@IbizaStyler Год назад
its the same as you can do with cloudflare, but it looks a bit easier... I'll give it a try :) ... aaaand your vid is an absolute banger! .... as usual ;) and btw: almost 3 mio subs! 🥳
@IsekaiDM
@IsekaiDM Год назад
I'm using Wireguard on my Router... Easiest setup ever and I also can control what each VPN connection can or can't connect to. No need for twingate which runs outside my home, I can even use this setup on a dynamic IP address. I can't see me switching to a service that isn't selfhosted, it's too risky for me.
@kams912
@kams912 7 месяцев назад
Great video! Thanks
@RNGDGaming
@RNGDGaming 4 месяца назад
Damn, this is so easy, and you just earned my subscription Thank you!
@Sladeofdark
@Sladeofdark Год назад
I just love how excited about Tech you are man! I am the SAME way, and I think we come from the same generation of IT pros. They just don't make em like you anymore. All these kids want to go straight into dev and make 200k/yr, and you are one of the FEW people that is Making SysAdmins Great Again. Thanks for all that you do.
@rpower9255
@rpower9255 Год назад
We need someone to tell this guy about WireGuard and iptables. It's 10 lines of WireGuard's config and LITERALLY 5 rules of iptables. 2 minutes to get it up and you have full control of what's going inside the tunnel.
@wildblack1
@wildblack1 Год назад
He probablty knows but the video is an ad and is trying to sell you the product.
@rpower9255
@rpower9255 Год назад
@@wildblack1 i mean yeah, but saying about "end of vpns" in era of simplest and fastest vpn proticol is nonsense I guess
@wildblack1
@wildblack1 Год назад
@@rpower9255 As long as the nonsense gets people to buy the product i doesn't matter the the sponser
@user-bi4jp5jo1m
@user-bi4jp5jo1m 5 месяцев назад
Love your videos. I remember seeing this video when you posted it, but just now getting around to trying it. What's your opinion of cloudflares vs twingate?
@kapzvara5732
@kapzvara5732 Год назад
Great Video thanks for this really like the concept about QUIC this is better then TCP :) Also how it keeps the connection connected when switching from wifi to 5G.
@user-eh3nk3dq6t
@user-eh3nk3dq6t Год назад
My Master's thesis was about zero-trust networking. This technology is great and pretty safe at so many levels especially with DDoS and other types of threats. Great explanation as usual Chuck!
@tobylegion6913
@tobylegion6913 Год назад
but how is it really zero trust if it is managed by a third party?
@Loodough
@Loodough Год назад
@@tobylegion6913 You are correct! I wouldn’t trust a third party either. Mainly i’m talking about the technology itself which is much broad and has a great potential. Remember this technology is still under development phase. Which means every company will try its way to come up with a way that enables them to grab some 💵
@philipgriffiths5779
@philipgriffiths5779 Год назад
Shame we didnt talk before you did your thesis... I work on the open source OpenZiti project which allows anyone to embed zero trust networking into almost anything (incl. apps with SDKs). Would have been great thesis project. We worked with one team recently who built an intent-based network using ziti and blockchain!
@Loodough
@Loodough Год назад
@@philipgriffiths5779 Would’ve been great collaboration. That was a long time ago and it would be an honour!
@philipgriffiths5779
@philipgriffiths5779 Год назад
@@Loodough Hopefully you can find some future use for OpenZiti 😁
@hckr4hire
@hckr4hire Год назад
I personally use TeamViewer which is a paid for service and software. But I would love to see an open-source version of the software you just described. I want to host the monitoring myself so I don't have to rely on an outside company. Excellent video! I will definitely be trying this out!
@Cheshire_Astronomy
@Cheshire_Astronomy Год назад
VNC is free too
@allgrownupaotearoa228
@allgrownupaotearoa228 3 месяца назад
Hi Chuck, loving your vids!! Can this be setup as an interface in pfSense?
@user-uf5bx6yx3e
@user-uf5bx6yx3e 3 месяца назад
After he said "everything I teach requires coffee" I, actually stopped, put the pot on, and waited till my coffee was done. lol. your awesome
@alexrice-reynolds6995
@alexrice-reynolds6995 Год назад
I’d love to see a nitty gritty comparison and performance test between Twingate, Tailscale, and ZeroTier. I’ve been using Zerotier for a long time but Twingate’s more modern security features might be what makes me switch.
@danielkosc
@danielkosc Год назад
It would be awesome, I am also interested in that comparison as I am using ZeroTier but until now I haven't heard about other alternatives like this.
@jtmartin1972
@jtmartin1972 8 месяцев назад
I like Tailscale better.
@domantlen6231
@domantlen6231 7 месяцев назад
I use zerotier and it's rules yet enabling access to the rest of network and managing access for specific ips per user would would be MUCH more difficult to achieve than in twingate.
@swiftsudo
@swiftsudo Год назад
This really looks like Tailscale. The UI looks very similar down to the ordering of the menu items within the control panel. Sure there’s some nicer things that seem to just add UI wrappers on top of where Tailscale has ACLs defined as code. And with Tailscale, there’s also the OSS control plane Headscale that can be run with the native Tailscale programs/apps. Not really sure that Twingate is a better alternative for selfhosted or otherwise…
@ultravioletiris6241
@ultravioletiris6241 Год назад
Yea it does seem similar to Tailscale. Interesting that the ordering of items on the menu is the same…. I wonder how much ‘inspiration’ they got from Tailscale lol
@owacs_ender
@owacs_ender Год назад
Cool idea, gonna look for self-hosted open source options, thanks.
@tater2017
@tater2017 6 месяцев назад
Great video man!
@NvyZero
@NvyZero 10 месяцев назад
Im so glad I found this channel! Thanks Mr. NetworkChuck for providing great instruction, and excellent videos!
@korndogz69
@korndogz69 Год назад
You said, "VPNs are old", but proxy servers are even older. They're the precursor to VPNs. Just had to point that out. Doesn't mean this method isn't effective.
@ultravioletiris6241
@ultravioletiris6241 Год назад
Yea at least Tailscale uses Wireguard
@simonpong1689
@simonpong1689 Год назад
it sounds good, but still there is no guarantee that your third party vpn provider won't get hacked or sell your data. If I do care about my data, I would rather setup a wireguard server instead, as it's fast, secure, and fully under my control.
@WolfHowl71
@WolfHowl71 Месяц назад
+1 to those who immediately reacted to the weakness of someone else handling control of your network access. That's a huge no go, Chuck.
@windsongmusic
@windsongmusic 3 месяца назад
First and foremost I want to say thank you for everything you have helped me with over the years. I moved to the us to take care of my mother niece and nephew a few years back. He would sit with me while I watched youtube from time to time and he always loved watching your channel. One of the funniest things he ever said was after I shaved and shortened my beard by better than half. You see he had met friends of mine and others who could give zz-top a run for their money. He was convinced, probably because of Dumbledore, that wisdom didn't come with age. No. The true measure of a man, his Knowledge and wisdom were dependent upon the quality of ones beard. Apparently the thicknesses was a measure of general knowledge. The more hair you had the more general knowledge you had. The length of ones beard was how you you determined seniority. Thick beard you knew about all kinds of different things. The longer the beard the more people should listen to you. Those were more or less the rules he came up with As I remember them. He asked me if you were really smart and I told him you were. He asked if you were as smart as me and I told him that you were so smart that you were teaching me things that I didn't know. He began calling you mister beard at that point. I told you all of that in order to get to this point. I decided I needed to get rid of some of the length of my beard. When my nephew saw me he was beside himself. He was upset because your beard was bigger than mine and He didn't want me to be a dummy so I had to grow it back. And I was going to have to watch more videos of yours because you taught me things and that of course wouldn't make it grow back faster since now I was stupid. I hope you got as big a laugh out of that as I did.
@fancyhandlegoeshere
@fancyhandlegoeshere Год назад
I will demo this because I'm curious, but I will say right off the bat that I'm not wild about deploying anything that requires something in the external cloud to function. ¯\_(ツ)_/¯
@staticnetwork
@staticnetwork Год назад
Seems like twingate is either using TLS sessions OR its actually a traditional VPN under the hood with some ZTNA security features.
@NetworkChuck
@NetworkChuck Год назад
keep watching. I deep dive a little on how it works.
@staticnetwork
@staticnetwork Год назад
@@NetworkChuck Ok, I just finished the video. It sounds like its a TLS session that does a port translation. This is actually something that is being implemented (or soon to be implemented) by more traditional network vendors.
@JakeCarlos928
@JakeCarlos928 Год назад
I love your Awesome video tutorial s they are so helpful and straight forward 🙂
@Chron880
@Chron880 10 месяцев назад
the thumbnail of this vis is brilliant lmfao i havent laughed out loud like that in awhile
@ryd3v
@ryd3v Год назад
End of VPNs, because my sponsor is great lmao
@carlostrudo
@carlostrudo Год назад
I’m a bit unease with controller being hosted on a private cloud . Specially if are the ones running the “firewall rules” created.
@robertb6276
@robertb6276 Год назад
Agreed, but you could always implement a firewall on your side between the Connector and your network.
@carlostrudo
@carlostrudo Год назад
@@robertb6276 ah, sure, but my problem with it is that “all the magic” seems to be done in the relays and controllers, so maybe an bad actor inside the company, or hacker, could have access to your stuff without your knowledge. Of course, pem certificates is a great way to go but you generate it on their site so… you know… I’m paranoid. lol.
@joshuagomez3600
@joshuagomez3600 Год назад
Cool stuff for sure! thx for sharing!
@ds65280
@ds65280 11 месяцев назад
The best "VPN" I ever did use. Big thanks for sharing this !
@jwhi828
@jwhi828 Год назад
Funny cause I just found this a few days ago and started using it.
Далее
3 Levels of WiFi Hacking
22:12
Просмотров 1,5 млн
Why VPNs are a WASTE of Your Money (usually…)
14:40
You've been using AI Wrong
30:58
Просмотров 216 тыс.
STOP using VPN, embrace Zero-Trust networking!
24:11
Просмотров 85 тыс.
How To Access the DARK WEB in 2024 (3 Levels)
15:20
Просмотров 3,6 млн
I Can't Recommend the ROG Ally X
15:51
Просмотров 188 тыс.
your home router SUCKS!! (use pfSense instead)
45:31
AI Networking is CRAZY!! (but is it fast enough?)
13:41
Free Security Tools Everyone Should Use
13:15
Просмотров 1 млн
Индуктивность и дроссель.
1:00
ПК с Авито за 3000р
0:58
Просмотров 1,5 млн
КАК GOOGLE УКРАЛ ANDROID?
17:44
Просмотров 52 тыс.