Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Changes to Tailscale Pricing and Plans

tailscale.com

Post reply on HN
Print view View original

101–110 of 116 posts

Re: Changes to Tailscale Pricing and Plans

#101

Post by zamnos »

0xEFF wrote: post #53
modernpacifist wrote: post #29

Earlier quoted context omitted.

- Entire site-to-site tunneling/routing. I didn't have to do anything for my parents I just dropped a subnet router at their place. - Access my services/servers at home from anywhere in the world. Friendly mobile apps as well that allow the same. - In cloud environments (for work and fun), don't even bother provisioning public IPs and having to deal with those firewall rules, just use Tailscale - https://tailscale.co…

What is it that Tailscale provides over plain vanilla wireguard? Is it a static address somewhere to connect to?

Plain vanilla wireguard involves a bunch more faffing about with wg, wg0 and keys. With Tailscale, you (can just) install the software on each computer and then log in. There are also more advanced things you can do with Tailscale, but I chose Tailscale because of wanting to not have to deal with the setup like Wireguard (or OpenVPN) have.

Re: Changes to Tailscale Pricing and Plans

#102

Post by ac29 »

ASinclair wrote: post #27
morley wrote: post #13

I see a lot of love for Tailscale, but I'm curious what people use Tailscale for? Is it mostly to access services running on an internal network? Do you use it for work or for fun? The use case I can see is streaming from my personal Plex server from anywhere outside my home, but maybe I'm not thinking big enough.

You can setup an exit node on your home network where you run a Pi-hole and get the domain blocking on the go.

I do this with a free nextdns account, no VPNs needed. Works very well.

Re: Changes to Tailscale Pricing and Plans

#103

Post by lathiat »

morley wrote: post #13

I see a lot of love for Tailscale, but I'm curious what people use Tailscale for? Is it mostly to access services running on an internal network? Do you use it for work or for fun? The use case I can see is streaming from my personal Plex server from anywhere outside my home, but maybe I'm not thinking big enough.

I subnet advertise my entire home network, which I consume from my phone and laptop on the go. Primarily to access home assistant, plex and SSH without advertising any of those to the internet - people can and do get hacked both via plex and SSH :)

When travelling internationally, I use the exit node functionality to optionally switch on and off sending all my traffic back home to either work around geo-blocks for my home streaming services or as a pseudo-vpn replacement for particularly dodgy networks.

Re: Changes to Tailscale Pricing and Plans

#104

Post by dizhn »

morley wrote: post #13

I see a lot of love for Tailscale, but I'm curious what people use Tailscale for? Is it mostly to access services running on an internal network? Do you use it for work or for fun? The use case I can see is streaming from my personal Plex server from anywhere outside my home, but maybe I'm not thinking big enough.

I am doing a lot of what people here said they are doing with tailscale but I just use plain wireguard. As I understand it tailscale makes various configurations automatic, management easy and provides features like authentication that wireguard does not have. But for a small number of hosts, it's fine to run wireguard itself and manage manually.

Re: Changes to Tailscale Pricing and Plans

#105

Post by codethief »

sconi wrote: post #97
codethief wrote: post #96

I've been looking into using Tailscale/Headscale but I've been struggling[0] to find in-depth information about what security risk the coordination server poses (should it get hacked). Yes, the node list can be locked but the ACL cannot(?) So if I, say, run the Headscale coordination server on one of the devices that are part of my Tailnet, wouldn't an attacker that controls the coordination server automatically get…

Curious why you want to run Headscale? Is it purely to avoid the risks of the coordination server?

Yes, and because Tailscale requires me to use a third-party identity provider.

Re: Changes to Tailscale Pricing and Plans

#107

Post by tatersolid »

maximilianburke wrote: post #84
morley wrote: post #13

I see a lot of love for Tailscale, but I'm curious what people use Tailscale for? Is it mostly to access services running on an internal network? Do you use it for work or for fun? The use case I can see is streaming from my personal Plex server from anywhere outside my home, but maybe I'm not thinking big enough.

We use it at work. All our services run on private IPs on our own vnets, and we access them with Tailscale. We don't need to run a VPN tunnel, or manage public IPs and firewall rules.

Technically maintaining your Tailscale ACLs is the same as maintaining “firewall rules”. If you’re allowing any-any on your tailnet you are in a world of hurt if any endpoint gets compromised by e.g. ransomware.

We use Tailscale at $dayjob and the fact that we can ensure that marketing machines can’t access any engineering resources is the big win. And it “just works” through NAT.

Re: Changes to Tailscale Pricing and Plans

#108

Post by sconi »

codethief wrote: post #105
sconi wrote: post #97

Earlier quoted context omitted.

Curious why you want to run Headscale? Is it purely to avoid the risks of the coordination server?

Yes, and because Tailscale requires me to use a third-party identity provider.

Got it. Makes sense. A big part of why we're building Bowtie. https://bowtie.works . We stay out of the critical path.

Re: Changes to Tailscale Pricing and Plans

#109

Post by andrew-d »

codethief wrote: post #105
sconi wrote: post #97

Earlier quoted context omitted.

Curious why you want to run Headscale? Is it purely to avoid the risks of the coordination server?

Yes, and because Tailscale requires me to use a third-party identity provider.

As of about a month ago, you can self-host your own OIDC identity provider; for example, Ory Hydra is open-source.

https://tailscale.com/blog/custom-oidc/

Re: Changes to Tailscale Pricing and Plans

#110

Post by MrPowerGamerBR »

gilbertbw wrote: post #40

I'm a big Tailscale proponent, implementing it at work in early 2020. But for us I'm not sure this is great news. We have a small Tailnet of 5 users, paying $30 for the Team plan. If we went for Starter we'd save $18, but loose a lot of cool things Tailscale has come out with recently that we have been looking at, like user/group level ACLs, ACL Gitops,Tailscale SSH and Tailscale Funnel. Alternatively we'd pay $36 fo…

This is weird, currently I'm using the Free plan but I always wanted to upgrade to financially help Tailscale, but now that the Starter plan doesn't have SSH and Funnel, it would make more sense to stay on the Free plan instead.

It doesn't even make any sense, if it is available on the Free plan, why not give it to the Starter plan too?

Also, I may be misunderstanding the billing page, but it looks like Tailscale removed soft limits? On my billing page, it shows "Your tailnet has 3 more users than you are paying for. That’s fine, we have soft limits. Play around and upgrade your plan before April 30th 2024."

Post reply on HN