I stumbled across Diode whilst looking for ways to do secure off-site backups (to my own equipment at another house) and it feels like a paid-for TOR (Ok, there is a free option)

I’m looking for any real experience as the site has too much marketing lingo in it:

Every Client is secured with a public/private key self-custody identity

And this doesn’t seem very dynamic if I want to change something:

Diode’s Blockchain Name System can be used for Client friendly names

And somewhere on the site it infers unlimited storage…!

So, is the free option worth me looking into, or is it a waste of time?

  • signalsayge@infosec.pub
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 day ago

    It sounds to me that for your specific use case, the tailscale free option would be a better match. You can self host it if you would like, using headscale (involves a little more work though). It’s basically like an orchestrator for wireguard tunnels.

    I’m running tailscale on quite a few of my systems. I’ve configured the Grants (like advanced ACL’s) to allow for only specific services available from certain hosts while other hosts can act as exit nodes like a VPN egress. I’ve found it very useful for connecting families networks up so that I can assist with remote troubleshooting help and I’ve used it to reach back into my own network while traveling.

    • SayCyberOnceMore@feddit.ukOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      12 hours ago

      Hmm, ok, I’d not thought of the remote troubleshooting part.

      The NAS is at a family member’s home, so the troubleshooting might come up in the future.

      Thanks

  • frongt@lemmy.zip
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    3
    ·
    2 days ago

    blockchain

    I stopped reading there. Pass. I don’t know if the rest of it works as advertised, but if it’s built on hype tech it’ll be abandoned soon enough.

  • dogs0n@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    2 days ago

    Any backup location is secure as long as you encrypt your data securely before you back it up there.

    For something as important as a backup that you don’t want to lose, I’d stick with something tried and true like Backblaze B2.

    Backblaze is also very cheap for what it is (a great storage solution). You can pay monthly or use more of the regular pay as you go model.

    Monthly and pay as you go have ups and downs, but the benefit of pay as you go for me is the ridiculously cheap deal (if you download your backups a lot it may be less so, but I don’t so it works out very cheap for me).

    • SayCyberOnceMore@feddit.ukOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      Agreed - Diode caught my eye as an alternative to a site-to-site VPN as I have 2x NAS at different locations (+ Backblaze, which I’ll be moving away from)

      So, it’s less about the destination, more about the network…

      But it feels like the website’s got more time invested in it, than the actual tech solution.

  • talkingpumpkin@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    Look at restic and/or borg first. Iff you have specific needs that they don’t address, then look at other things (including reviewing your requirements: chances are you are doing something wrong in that case).

    • SayCyberOnceMore@feddit.ukOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      Yeah, those are for the layer on top of a secure network.

      My use case is less about the backup software, more about the network.

      Diode - as far as I can make out from their site - provides both storage and networking, but I’m not interested in their storage (as I don’t understand where it is) - this is about getting data to my offsite NAS, securely.

      • ccryx [he/him]@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        What I’m reading is that you want site-to-site connectivity. Wireguard + possibly dynamic DNS makes this pretty easy (assuming you can open ports and configure NAT at your sites). Or you could set up some other VPN solution like OpenVPN.

        There’s also tailscale (a paid service) for facilitating the wireguard setup, NAT traversal and relaying. headscale is a self hosted solution that aims to provide something similar (but more limited in scope).

        • SayCyberOnceMore@feddit.ukOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          12 hours ago

          Yeah, my default go to is a site-to-site OpenVPN tunnel, but thought I’d look around at what the kool kidz are doing these days. Thanks.