保护我的服务器并了解它的功能：使用 Tailscale 和 Beszel
我最近花了一个周末来改善我的VPS设置，结果学到了比预期更多的网络知识。
我遇到了两个一直困扰我的问题：
首先，我的SSH端口仍然暴露在互联网上。我知道使用基于密钥的身份验证通常是安全的，但我从来不喜欢将其开放。
其次，我没有简单的方法来知道某个服务是否崩溃，或者我的VPS实际使用了多少CPU、RAM或磁盘空间，我不想每次都通过SSH登录去查看发生了什么。
我最终找到的解决方案是Tailscale + Beszel。
在设置过程中，我深入了解了Tailscale是如何与WireGuard、NAT打洞、DERP中继等技术协同工作的，以及SSH是如何在基于UDP的VPN上正常工作的。
我将我学到的所有内容写成了一篇博客，里面有关于如何设置Tailscale和Beszel的详细指南。
[博客链接](https://syedfazil.dev/blogs/tech/tailscale-beszel-vps)
我希望能帮助到面临同样问题的人，并期待来自经验丰富的朋友们的反馈。
查看原文
I recently spent a weekend improving my VPS setup, and I ended up learning a lot more about networking than I expected.<p>I had two problems that kept nagging me<p>My SSH port was still exposed to the internet. I know it's generally safe with key-based authentication, but I never liked leaving it open.<p>I had no easy way to know if a service had crashed or how much CPU, RAM, or disk space my VPS was actually using and I didn't want to SSH into it to see what's happening everytime.<p>The solution I ended up with was Tailscale + Beszel.<p>While setting it up, I went down a rabbit hole learning how Tailscale works under the hood with WireGuard, NAT hole punching, DERP relays, and how SSH still works over a UDP based VPN.<p>I wrote everything I learned into a blog post with a detailed guide on setting up Tailscale and Beszel.<p>https://syedfazil.dev/blogs/tech/tailscale-beszel-vps/<p>I am looking to help anyone who is facing the same problem and for feedback from experienced folks