Wireguard doesn’t send anything back if the key is not correct.
Because of this, Tailscale port swapping is inconsequential vs wireguard here.
Tailscale transfers trust of your VPN subnet to a third party, which is a real security concern.
I agree SSH service will be attacked if they are plainly exposed, out of date and allow login challenges.
Also agree that under or misconfiguration is a massive cause for security issues.
Disappointed to see the cloud people preaching uptime when most cloud offerings have severe downtime issues weekly.
Stop living in a bubble.
Github was down yesterday and that isn’t fun.
Stuff still goes down all the time on the cloud. More than on prem in my experience.
They don’t even properly track their downtime and lie about 99.9