Tailscale

Tailscale builds a mesh VPN between your laptops, servers and containers using the WireGuard protocol, with keys exchanged automatically and traffic travelling directly from peer to peer. It adds MagicDNS names, access control lists for authorisation, subnet routers for reaching whole LANs, and SSH for remote shell access without opening ports on the gateway.

Teams adopt it for remote access to internal dashboards and databases, and home users reach a homelab from any device while travelling.

Hosted on infrastructure you control, the overlay needs no per-user licence for every machine that joins, and the peer directory stays in your own environment rather than a vendor account.