<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Matt</title>
    <description>The latest articles on DEV Community by Matt (@mrmatt).</description>
    <link>https://dev.to/mrmatt</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3704401%2Fa8decb02-c6ff-4d19-9fd4-9186f06427be.png</url>
      <title>DEV Community: Matt</title>
      <link>https://dev.to/mrmatt</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/mrmatt"/>
    <language>en</language>
    <item>
      <title>Local networks are fragile. Personal networks are not.</title>
      <dc:creator>Matt</dc:creator>
      <pubDate>Sat, 10 Jan 2026 18:32:36 +0000</pubDate>
      <link>https://dev.to/mrmatt/local-networks-are-fragile-personal-networks-are-not-4c70</link>
      <guid>https://dev.to/mrmatt/local-networks-are-fragile-personal-networks-are-not-4c70</guid>
      <description>&lt;p&gt;Most connectivity problems people face are not caused by broken tools or bad configuration.&lt;br&gt;&lt;br&gt;
They come from relying on the physical local network as a stable foundation.&lt;/p&gt;

&lt;p&gt;Home Wi-Fi, LTE, corporate VPNs, hotel networks — all of them are temporary transports.&lt;br&gt;&lt;br&gt;
IPs change, DHCP reassigns addresses, routes break, VPN clients override traffic.&lt;br&gt;&lt;br&gt;
Yesterday everything worked. Today &lt;code&gt;ping&lt;/code&gt; works, but &lt;code&gt;ssh&lt;/code&gt; doesn’t.&lt;/p&gt;

&lt;p&gt;This is not a mistake — it’s how local networks are designed.&lt;/p&gt;

&lt;p&gt;WireGuard solves a different problem.&lt;br&gt;&lt;br&gt;
It creates a fast, encrypted, point-to-point network between machines that does not depend on where they are connected from. It became an industry standard because it is minimal, predictable, and secure at the protocol level.&lt;/p&gt;

&lt;p&gt;But WireGuard alone does not solve operational reality:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;who is allowed to connect,&lt;/li&gt;
&lt;li&gt;how devices discover each other,&lt;/li&gt;
&lt;li&gt;how mobile clients behave across networks,&lt;/li&gt;
&lt;li&gt;how to coexist with VPNs and NAT.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Those problems live above the protocol.&lt;/p&gt;

&lt;p&gt;That is why experienced engineers often choose a higher level of abstraction on top of WireGuard. Tools like Tailscale or Headscale do not replace WireGuard — they operationalize it. They keep the same cryptographic foundation, but add coordination, identity, and automation.&lt;/p&gt;

&lt;p&gt;The mental model shifts:&lt;/p&gt;

&lt;p&gt;Home Wi-Fi / LTE / VPN / any network&lt;br&gt;
↓&lt;br&gt;
(internet)&lt;br&gt;
↓&lt;br&gt;
┌── WireGuard ──┐&lt;br&gt;
│  Your network │&lt;br&gt;
│  (100.x.x.x)  │&lt;br&gt;
└───────────────┘&lt;/p&gt;

&lt;p&gt;You no longer fix the local network.&lt;br&gt;&lt;br&gt;
You build your own logical network on top of it.&lt;/p&gt;

&lt;p&gt;OpenWrt, better routers, static DHCP — these improve your home infrastructure, but they do not change this fundamental reality. They make the transport cleaner, not stable everywhere.&lt;/p&gt;

&lt;p&gt;Choosing abstraction here is not about simplicity or lack of skill.&lt;br&gt;&lt;br&gt;
It is about knowing where manual configuration stops adding value and where reliability, predictability, and operational clarity begin.&lt;/p&gt;

&lt;p&gt;Understanding WireGuard is important.&lt;br&gt;&lt;br&gt;
Living inside it manually is optional.&lt;/p&gt;

&lt;p&gt;That distinction is what separates network configuration from network architecture.&lt;/p&gt;

</description>
      <category>wireguard</category>
      <category>networking</category>
      <category>devops</category>
    </item>
  </channel>
</rss>
