Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
Golink: A private shortlink service for tailnets
11–20 of 84 posts
Re: Golink: A private shortlink service for tailnets
#12Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
Stay tuned, I have plans :)
Re: Golink: A private shortlink service for tailnets
#13Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
Zero trust doesn't mean abandoning defense-in-depth.
Re: Golink: A private shortlink service for tailnets
#14Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
nebula[0] may be interesting; you can allow list connectivity for specific groups, all burned into the cert used to join the network. It uses some NAT hole punching orchestration to accomplish connectivity between hosts without opening ports.
The main painful thing I've found has been cert management. PKI, as usual, is not a solved problem.
I've managed to do some fun stuff using salt + nebula on the hobby side.
Re: Golink: A private shortlink service for tailnets
#15Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
"On the other hand, the former might be just to expensive for smaller organisations."
GCP's Identity Aware Proxy (IAP) comes free with the load balancer
Re: Golink: A private shortlink service for tailnets
#16I started reading bout tailnet and still have no clue what it is
Re: Golink: A private shortlink service for tailnets
#17Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
cloudflared
Re: Golink: A private shortlink service for tailnets
#18Big fan of Tailscale, yet I wonder whether it wouldn’t be better to make internal services securely available over the internet (zero trust rather than castle-and-moat). On the other hand, the former might be just to expensive for smaller organisations.
I forgot to add a link to our recent announcement blog post to the project README. I've added that now, and I think it may help explain why we specifically built a service like this on top of Tailscale to take advantage of Magic DNS, automatically authenticated connections, etc. https://tailscale.com/blog/golink/
Re: Golink: A private shortlink service for tailnets
#19More "Go"ogle culture out in the wild. I've seen these at a few companies now. I'm a little surprised they're still called "go"-links, though I suppose the name works everywhere.
Huh. This is a thing I've seen at a few companies now and never seen reference to them coming out of Google. It makes sense, but it's also completely standalone - "go to the page."
A couple of the startups that do go links have blog posts on the history:
Re: Golink: A private shortlink service for tailnets
#20More "Go"ogle culture out in the wild. I've seen these at a few companies now. I'm a little surprised they're still called "go"-links, though I suppose the name works everywhere.
Huh. This is a thing I've seen at a few companies now and never seen reference to them coming out of Google. It makes sense, but it's also completely standalone - "go to the page."
It was one of the most popular “mini-services” at google along side less useful things like percent/ (which shows your tenure percentile), memegen and bunch of others, maintained by like a single engineer on the side. These were (at least to me) what was so great about Google’s early engineer-driven culture. It was like the early web app age in a sense…