Laptop-to-Desktop Failover Needs Agent State, Not Hope
A second worker is useful only if it knows what the first worker already changed.
A second worker is useful only if it knows what the first worker already changed.
Every extra reverse proxy adds another place for routing, TLS and headers to disagree.
Multiple proxies are fine when each boundary has one explicit owner.
I do not use Tailscale as a generic VPN. I use it as the stable identity and reachability layer between my laptop, desktop and home server.
The difference between a lab box and production infrastructure is not the hardware; it is whether failure has a documented recovery path.
Most beginner lab failures were not exotic protocol bugs. They were wrong masks, wrong VLANs, missing routes, stale assumptions and tests that did not isolate the failing layer.
Once I started reading Linux routes as prefix decisions instead of interface settings, multi-interface hosts and lab gateways became much easier to debug.
A useful home lab does not need enterprise hardware. A spare PC, a small switch and a few isolated network experiments are enough to learn a lot about real interfaces, routes and services.
Moving from local console access to SSH keys changed the lab from a collection of machines into something I could actually operate and troubleshoot remotely.