In the HN page you linked many people mentioned v2ray. Have you tried that? How good is it?

Nope, haven’t actually read the comments, just sent the article as reference to the issue. It does indeed sound quite promising. Think it’d be nice to have even if as just a fallback, so I’ll try that too, whenever I get a moment.

Yep. That’s the number one contender. Well right after overriding default DERP’s with my own VPS machines. I’ll definitely try it out over some weekend.

One of my other concerns with this and other solutions suggested is the reliance on wireguard which can be subject to fingerprinting and censorship. Do you happen to know if it’d be possible to swap out Headscale’s implementation of wireguard to amnezia? I’ll have to do my homework anyway, but who knows, maybe there are some pitfalls to avoid.

Tailscale… is not that good. The underlying wireguard is robust, but tailscale control plane is completely proprietary, as well as their DERP servers that it too often uses completely needlessly. They can also block you off from downloading it, updating, or logging in, if you happen to be in a wrong country.

I’m myself looking for an alternative to it, but having trouble finding something I could share with non tech savvy friends while not being as complex on my end as, say, open/strongswan ais. Any suggestions welcome.

And ban all Israelis

You’re in luck because bluesky is literally the only one with that exact feature. Just search for user lists, which you can use to subscribe en-masse, or, conversely, nothing’s preventing you from using them as block lists. There are probably few out there where bots monitor for anyone who ever spoke hebrew, which should fit your purpose

They could try to employ some kind of Apple defense, like, you wouldn’t hit Apple for having monopoly on iOS. As long as it’s not the only solution on the market. And for web, most of time, you could access the same resources and get similar experience by downloading… the apps… wait, they have a monopoly on that, too. Well, they are completely screwed in that case.