Personally I use a router from Mikrotik #Ad. A nice feature which can be used on routers with a USB port and arm64 processors is the capability to run containers. So I am able to use Tailscale on my router. Download the Tailscale package (check CPU architecture) and use “manual install”. A security warning will show up during this process. Installation is done and the service is running. ...
I have seen at customers every once in a while small NAS device e.g. from Synology #Ad in branch offices which were used for various purposes. This is a good endpoint to use Tailscale to make it available to other branch offices or the head office and also to be able to provide a route into this network of the branch office without the need to a complex VPN site to site installation. ...
Since OpenSSH Version 8.2 FIDO/U2F is supported. Type this into your terminal 1 ssh -V to find out the version of the SSH installation. To enhance SSH with FIDO/U2F, in this example with a Yubikey #Ad or with the cheaper Yubikey FIDO #Ad, the following steps are required: Create new private and public keys with the option -t ed25519-sk and with the option -f id_ed25519_sk write it into a file in the local SSH directory. During this process the Yubikey #Ad gets “married” with the private key. ...