Viewing profile — tailscaletom

Yepp! Strong recommend on using systemd-resolvd, we've observed the least bugs and issues there.

Userspace mode might be an option (runs without a TUN or doing any system network wiring, at the expense of performance): https://tailscale.com/kb/1112/userspace-networking/ Runnin…

Yes. Peers added in this fashion would not have been signed by a trusted tailnet-lock key, so clients would refuse to trust them.

If you're excited about tailnet lock and want to get on the alpha sooner rather than later, feel free to drop me an email. As Dave mentioned we are slowly crunching through the wai…

(Tailscalar and a tailnet lock author here) If you're okay with trusting Tailscale's control plane, we have a feature for exactly this use case! Its called Device Authorization: ht…

(Tailscalar and a tailnet lock author here) Thanks for the feedback!! Writing the documentation for how this worked was a challenge, and its good to hear what pieces we need to cal…