Live data from Hacker News

Add ability to choose a custom coordination server

github.com

91–100 of 114 posts

Re: Add ability to choose a custom coordination server

#91
I want to use tailscale for me and my wife. I’d like to give them my money to manage it for me because adding yet another self-managed service to my home network seems tedious.

It seems to me like I would want two “users”, but that pushes me into their pro or business billing. Which tier should I go for?

Re: Add ability to choose a custom coordination server

#92

I want to use tailscale for me and my wife. I’d like to give them my money to manage it for me because adding yet another self-managed service to my home network seems tedious. It seems to me like I would want two “users”, but that pushes me into their pro or business billing. Which tier should I go for?

Sign up and just add another user to your account. Their limits are soft and they probably won’t bother you if all you have is an extra user. Tailscale is fair and flexible this way.

Re: Add ability to choose a custom coordination server

#93
post #12

Earlier quoted context omitted.

But completely missing the thing that makes Tailscale great, imho: ACLs.

This was focused more on secure key distribution. The plugin could be extended to include tags and firewall rules for the groups/peers similar to Tailscale's design and convert them to PostUps that modify nft or iptables.

Yup! And that's where it gets significantly more complicated quickly.

Re: Add ability to choose a custom coordination server

#94
post #48

Earlier quoted context omitted.

They can add a node and connect to whatever other node they want.

This seems solvable. They talk about that here: https://tailscale.com/kb/1099/device-authorization/ But it still seems like they could flip that feature off if they got compromised. To remedy that, feels like they could support a preshared secret that they don't control / see being shared as a first step: https://tailscale.com/kb/1099/device-authorization/#generate...

You can't generate a secret with a webapp they control without them controlling the secret too.

Re: Add ability to choose a custom coordination server

#97
post #95

How does a start up like Tailscale gets to advertise on front page of HN so frequently? I mean every feature and blog. As a start up person, I am really curious about their marketing.

People submit articles about them, and other people upvote them. It's really not that complicated.

Re: Add ability to choose a custom coordination server

#98
post #10

One interesting thing about Tailscale Android App is that it uses Gio UI(Golang GUI Framework). https://gioui.org/

I believe they also fund its development. A model for other tech shops to follow (fund the FOSS projects they make their millions with).

Re: Add ability to choose a custom coordination server

#99
post #7

I love Tailscale but I am wary of allowing them access into my personal network. This way, I can use them for my stuff without my paranoia getting in the way, and I can recommend the hosted option for work, as it works perfectly.

I don't really understand how self-hosting headscale is actually any more secure. The control server needs a stable IP address, so I'd need to run it on a VPS or something, which means I'm still trusting a third-party to not mess with my network.

Re: Add ability to choose a custom coordination server

#100
post #99
post #7

I love Tailscale but I am wary of allowing them access into my personal network. This way, I can use them for my stuff without my paranoia getting in the way, and I can recommend the hosted option for work, as it works perfectly.

I don't really understand how self-hosting headscale is actually any more secure. The control server needs a stable IP address, so I'd need to run it on a VPS or something, which means I'm still trusting a third-party to not mess with my network.

My home machine has a static IP, so I run it there. Does it need a static IP, or just a hostname?
Post reply on HN