Any experience of Diode?
from Cyber@feddit.uk to selfhosted@lemmy.world on 27 Oct 00:37
https://feddit.uk/post/38556128

I stumbled across Diode whilst looking for ways to do secure off-site backups (to my own equipment at another house) and it feels like a paid-for TOR (Ok, there is a free option)

I’m looking for any real experience as the site has too much marketing lingo in it:

Every Client is secured with a public/private key self-custody identity

And this doesn’t seem very dynamic if I want to change something:

Diode’s Blockchain Name System can be used for Client friendly names

And somewhere on the site it infers unlimited storage…!

So, is the free option worth me looking into, or is it a waste of time?

#selfhosted

threaded - newest

frongt@lemmy.zip on 27 Oct 01:12 next collapse

blockchain

I stopped reading there. Pass. I don’t know if the rest of it works as advertised, but if it’s built on hype tech it’ll be abandoned soon enough.

Cyber@feddit.uk on 27 Oct 07:10 collapse

Yeah, that was kinda my thoughts too.

dogs0n@sh.itjust.works on 27 Oct 02:40 next collapse

Any backup location is secure as long as you encrypt your data securely before you back it up there.

For something as important as a backup that you don’t want to lose, I’d stick with something tried and true like Backblaze B2.

Backblaze is also very cheap for what it is (a great storage solution). You can pay monthly or use more of the regular pay as you go model.

Monthly and pay as you go have ups and downs, but the benefit of pay as you go for me is the ridiculously cheap deal (if you download your backups a lot it may be less so, but I don’t so it works out very cheap for me).

Cyber@feddit.uk on 27 Oct 07:15 collapse

Agreed - Diode caught my eye as an alternative to a site-to-site VPN as I have 2x NAS at different locations (+ Backblaze, which I’ll be moving away from)

So, it’s less about the destination, more about the network…

But it feels like the website’s got more time invested in it, than the actual tech solution.

talkingpumpkin@lemmy.world on 27 Oct 05:04 next collapse

Look at restic and/or borg first. Iff you have specific needs that they don’t address, then look at other things (including reviewing your requirements: chances are you are doing something wrong in that case).

Cyber@feddit.uk on 27 Oct 07:27 collapse

Yeah, those are for the layer on top of a secure network.

My use case is less about the backup software, more about the network.

Diode - as far as I can make out from their site - provides both storage and networking, but I’m not interested in their storage (as I don’t understand where it is) - this is about getting data to my offsite NAS, securely.

ccryx@discuss.tchncs.de on 27 Oct 10:09 collapse

What I’m reading is that you want site-to-site connectivity. Wireguard + possibly dynamic DNS makes this pretty easy (assuming you can open ports and configure NAT at your sites). Or you could set up some other VPN solution like OpenVPN.

There’s also tailscale (a paid service) for facilitating the wireguard setup, NAT traversal and relaying. headscale is a self hosted solution that aims to provide something similar (but more limited in scope).

Cyber@feddit.uk on 28 Oct 07:36 collapse

Yeah, my default go to is a site-to-site OpenVPN tunnel, but thought I’d look around at what the kool kidz are doing these days. Thanks.

signalsayge@infosec.pub on 27 Oct 14:19 collapse

It sounds to me that for your specific use case, the tailscale free option would be a better match. You can self host it if you would like, using headscale (involves a little more work though). It’s basically like an orchestrator for wireguard tunnels.

I’m running tailscale on quite a few of my systems. I’ve configured the Grants (like advanced ACL’s) to allow for only specific services available from certain hosts while other hosts can act as exit nodes like a VPN egress. I’ve found it very useful for connecting families networks up so that I can assist with remote troubleshooting help and I’ve used it to reach back into my own network while traveling.

Cyber@feddit.uk on 28 Oct 07:39 collapse

Hmm, ok, I’d not thought of the remote troubleshooting part.

The NAS is at a family member’s home, so the troubleshooting might come up in the future.

Thanks