Vpn on ferkakta.devhttps://ferkakta.dev/tags/vpn/Recent content in Vpn on ferkakta.devHugoen-USCopyright fizz.Sat, 21 Feb 2026 09:00:00 -0600I replaced $489/mo in AWS Client VPN with a $3 t4g.nano running Headscalehttps://ferkakta.dev/headscale-aws-open-source-terraform-module/Sat, 21 Feb 2026 09:00:00 -0600https://ferkakta.dev/headscale-aws-open-source-terraform-module/<p>A finops sprint surfaced $489/mo in AWS Client VPN charges. Three endpoints across two accounts, plus connection-hour fees. For a VPN that four people used. I had provisioned two of them.</p> <p>At the time, they felt indispensable — secure customer access, familiar tooling, predictable behavior. In reality, they were architectural inertia.</p> <p>I replaced all three with a single t4g.nano running <a href="https://github.com/juanfont/headscale">Headscale</a> — the open-source Tailscale coordination server. Total cost: ~$3/mo.</p> <p>I genericized the Terraform and open-sourced the module.</p>