Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Headscale: Open-source implementation of the Tailscale control server

github.com

Post reply on HN
Print view View original

21–30 of 70 posts

Re: Headscale: Open-source implementation of the Tailscale control server

#21

Post by cheesetable »

gravypod wrote: post #19
cheesetable wrote: post #18

Not sure what I think about this. I don't use Tailscale because I don't trust their key distribution, and this open source project would solve that, but it might undermine Tailscale's sustainability. This would be a shame because Tailscale is working well with the open source community: open source clients, working well with distros, working well with Linux DNS stack, supporting a more P2P secure Internet, and docume…

You can possibly buy a subscription but tell the devs that you're using headscale. If enough people do this they might make a host-your-own version like bitwarden.

To clarify, I don't use Headscale either.

Both look like great products, I just don't need what they're offering enough to accept their downsides.

Re: Headscale: Open-source implementation of the Tailscale control server

#22

Post by zachberger »

RL_Quine wrote: post #4

As far as I could work out, you can’t use the iOS client for Tailscale without building your own binary for it. I’d love to be proven wrong.

It's in the App Store here:

https://apps.apple.com/us/app/tailscale/id1470499037?ls=1

Re: Headscale: Open-source implementation of the Tailscale control server

#23

Post by synergy20 »

With nearly all websites running https now, is it safe enough to surf without vpn these days.

Adding dns-over-https so your ISP can not collect where you're going.

As far as google etc collecting your info, it will work the same as long as you're using their service, with/without VPN.

I do use VPN(tailscale) for work so I can access corporate internal network, but for general surfing purpose, do I really need vpn these days.

Re: Headscale: Open-source implementation of the Tailscale control server

#24

Post by radus »

mediocregopher wrote: post #2

Another similar project to Tailscale, for those in the market: https://github.com/slackhq/nebula Crazy simple, fully open source, trivial to self-host. Maybe not as featureful as Tailscale, but imo that can be a feature unto itself.

Related, here's a surprisingly balanced comparison of Nebula and Tailscale, on tailscale.com: https://tailscale.com/kb/1148/tailscale-vs-nebula/.

> If you’re a system administrator or technical person looking for a completely open source, free peer-to-peer mesh VPN, and you’re willing to run a certificate authority and the control plane yourself, try out Nebula.

> If you’re looking for a polished, user-friendly peer-to-peer mesh VPN with a hosted control plane and integration with existing identity providers, give Tailscale a try.

Re: Headscale: Open-source implementation of the Tailscale control server

#25

Post by bibabaloo »

synergy20 wrote: post #23

With nearly all websites running https now, is it safe enough to surf without vpn these days. Adding dns-over-https so your ISP can not collect where you're going. As far as google etc collecting your info, it will work the same as long as you're using their service, with/without VPN. I do use VPN(tailscale) for work so I can access corporate internal network, but for general surfing purpose, do I really need vpn the…

In general, no. This is a good rundown, imo: https://gist.github.com/joepie91/5a9909939e6ce7d09e29/

Re: Headscale: Open-source implementation of the Tailscale control server

#27

Post by makeworld »

mediocregopher wrote: post #2

Another similar project to Tailscale, for those in the market: https://github.com/slackhq/nebula Crazy simple, fully open source, trivial to self-host. Maybe not as featureful as Tailscale, but imo that can be a feature unto itself.

Yggdrasil is not the same as either of these, but it can do similar things.

https://yggdrasil-network.github.io/

Re: Headscale: Open-source implementation of the Tailscale control server

#28

Post by RL_Quine »

zachberger wrote: post #22
RL_Quine wrote: post #4

As far as I could work out, you can’t use the iOS client for Tailscale without building your own binary for it. I’d love to be proven wrong.

It's in the App Store here: https://apps.apple.com/us/app/tailscale/id1470499037?ls=1

Yes, but that version works only with the tailscale.com server, not a custom one.

Re: Headscale: Open-source implementation of the Tailscale control server

#29

Post by bradfitz »

cheesetable wrote: post #21
gravypod wrote: post #19

Earlier quoted context omitted.

You can possibly buy a subscription but tell the devs that you're using headscale. If enough people do this they might make a host-your-own version like bitwarden.

To clarify, I don't use Headscale either. Both look like great products, I just don't need what they're offering enough to accept their downsides.

We're working on the key distribution trust problem. Stay tuned.

Re: Headscale: Open-source implementation of the Tailscale control server

#30

Post by bradfitz »

RL_Quine wrote: post #28
zachberger wrote: post #22

Earlier quoted context omitted.

It's in the App Store here: https://apps.apple.com/us/app/tailscale/id1470499037?ls=1

Yes, but that version works only with the tailscale.com server, not a custom one.

Actually the version that's in the App Store does support alternate control servers. It just needs to be configured via MDM configuration (https://support.apple.com/guide/mdm/mdm-overview-mdmbf9e668/...).

That's how our larger on-prem customers use the iOS client when they run their own in-house control plane server.

Post reply on HN