Sure thing, I'm obviously no expert in the matter. Please disregard any technical or technological advise I might appear to give.

Also! Enjoy Mexico!

Be careful with the food, as a foreigner trying spicy mexican food might give you "Moctezuma's revenge" (the runs) keep a peptobismol bottle at arms lenght. Also, if you're american stay away from tap water, we don't drink that, we drink water from "garrafón" (big water bottle).

Micheladas are pretty good if you're into beer and interesting flavours. Also try rusas with sprite (or any lime-flavoured soda). If you're going to Guadalajara please try "carnes en su jugo" and "tortas ahogadas", if you're going near the coast, "ceviche" is incredibly delicious. Lime ("limón") is the key to most mexican food and it's sour but incredibly good and you'll find it everywhere. The limes from "taquerías" however, are dry af. My safe food is "enchiladas Suizas", and you might find them in any and most restaurants (they're not actually from Switzerland)

Have fun!

Consider mullvad :D

https://www.youtube.com/watch?v=Z9y29Wxo060

Tailscale is Canadian

https://en.m.wikipedia.org/wiki/Tailscale

You can also "simply" raw-dog Wireguard. It's built into the Linux kernel, so you barely have to install anything besides the userspace tools.

Basically, I objected to being reliant on the generosity of a for-profit company. "We do these things not because they are easy, but because we thought they would be easy."

This is a rough sketch:

• Set up dynamic DNS, e.g. https://freedns.afraid.org/
• Create a Linux server. It can even be a VM/container if you get the networking right.
• Create a Wireguard interface and pick a private IP address subnet that won't conflict with your home subnet: https://www.wireguard.com/quickstart/
• Define PostUp and PostDown rules in your Wireguard config that modify iptables to masquerade traffic from the Wireguard subnet
• Also set net.ipv4.ip_forward=1 with sysctl. (There is probably an IPv6 equivalent but I live in the past.)
• Generate keypairs and configs for each device you want to use
• Forward UDP port 51820 to your server
• Install the Wireguard app on your client devices. If Linux, you can just write a client config containing the necessary magic words and start it up with wg-quick.

Boom. Tailscale'd.

I'm sure I've forgotten some steps. I have some janky automation that's broken in a new way every time I try to use it.

Alternative is: Headscale.

Alternative is: Netbird

Also a bit annoying to set up in Russia, it works just fine, but the windows installer crashes trying to get an up to date version because of error 451. On iOS if you downloaded it before then it works (you redownload from the purchases page), have not tried on Linux yet