About

stealthtunnel is a reference for getting to your own systems from anywhere without leaving a door open. It covers Cloudflare Tunnel and Zero Trust access, WireGuard and its relatives, and the unglamorous parts that decide whether any of it works, such as MTU, DNS and service hardening.

Who writes it

I am Micheal Garner, a network engineer in the UK who works mostly with Fortinet and SD-WAN. This site is a side project built for interest: the parts of my homelab work that are about tunnels and remote access, kept up to date rather than posted once. The wider homelab write-ups are on my main blog.

How the guides are made

Commands and configuration follow the vendor's own documentation, and each guide links to the pages it relies on.
Examples use reserved example domains and private addresses, so nothing here points at a real network.
Where a figure comes from a specification, the guide says so. Where something is my judgement, it says that instead.
Guides carry a date. When a vendor changes something, the guide is updated and the change is marked.

Independence

This site is not affiliated with, sponsored by or endorsed by Cloudflare, Tailscale, ZeroTier or any other vendor mentioned. There are no affiliate links, no advertising, no cookies and no analytics.

Spotted a mistake?

Networking advice that is wrong is worse than none. If you find an error, an out-of-date step or a better way to explain something, please email contact@stealthtunnel.uk and it will be fixed, with credit for the correction if you want it.