# 101: VPN service

**URL:** <https://help.nextcloud.com/t/101-vpn-service/201997>\
**Category:** 📑 How to\
**Tags:** vpn, tailscale, 101, talk-app, dns\
**Created:** [August 28, 2024, 7:46pm UTC](https://help.nextcloud.com/t/101-vpn-service/201997 "2024-08-28T19:46:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [August 28, 2024, 7:46pm UTC](https://help.nextcloud.com/t/101-vpn-service/201997/1 "2024-08-28T19:46:23Z")

</div>

### Using a VPN service

An alternative to exposing your services directly to the internet is to use a VPN service in order to access your internal network, which can include Nextcloud and any other internal services.

- User device → traditional www proxy → `https://cloud.nextcloud.local`
- User device → VPN access → `a.dd.r.ess`
- Please note the details of VPN’s and how to use them are well outside this document and community. We are here to get your Nextcloud working, that is all.
  - Any particular issues and support questions should be directed to those communities, such as [OpenVPN community](https://openvpn.net/community/), [Wireguard](https://www.wireguard.com/#learning-more), etc.
  - **Please do not ask support questions for VPN services here on the Nextcloud forum.**

## Who is VPN access for?

If you are uncomfortable making Nextcloud available on the public internet, or would rather not use a domain, then a VPN could be the answer for you!

- Only people within your VPN will have any access.
- Common in the private sector and useful to understand.
- If you run Nextcloud on your private network only, and then want to access from outside temporarily

### advantages

- additional layer of privacy & security as Nextcloud is not accessible from the public internet.
  - IP forwarding will only apply to the VPN service itself (#wireguard, OpenVPN, etc.)
  - Access other “internal” services on your network, as you would locally.

- no additional domain name, TLS certificate or DNS service necessary.

### disadvantages

- additional complexity
  - Managing your own VPN is similar to hosting your own reverse proxy.
  - Or, use a pre-made, hosted option (#tailscale) to remove complexity of Wireguard, similar to choosing a DynsDNS service instead of paying to manage your own domain.

- reduced user experience by design
  - User device must establish VPN access, then → Nextcloud
    - sharing is only possible within VPN user group
    - collaboration is no longer an option for “external” people.
    - Users may require your assistance in understanding they must run an additional app or configuration file on each device to access the VPN.
      - If you reach this point, consider running an additional Nextcloud that is publicly accessible to those not wanting VPN access.
      - Hosted Nextcloud accounts are also useful for sharing and collaboration if you find one you trust. Worth considering a host in order to have public data an sharing, which can be federated back into your VPN-isolated instance.

## Can I make use of DNS routing to access a VPN?

Yes, to learn more as an overview see [split brain DNS explanation](https://help.nextcloud.com/t/101-split-brain-dns-split-horizon/202579) to get an idea of how it could be applied to split tunnel VPN systems as well to access specific applications, etc.

- **Advanced technical topic** , which requires technical understanding of DHCP routing, DNS servers, Split Brain DNS, networking and firewalls.
- No questions about this are supported here, because it is all based on that particular networking setup as opposed to Nextcloud. Sorry.

## Wait, I would rather use a publicly accessible www address and skip this VPN stuff.

Good, Please see documentation on configuring your Nextcloud to use a publicly accessible domain as normal.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [August 31, 2024, 8:19pm UTC](https://help.nextcloud.com/t/101-vpn-service/201997/3 "2024-08-31T20:19:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [August 31, 2024, 8:40pm UTC](https://help.nextcloud.com/t/101-vpn-service/201997/4 "2024-08-31T20:40:22Z")

</div>