According to the blog[1], Tailscale currently have a relay network for relaying traffic when NAT traversal does not work.
I wish one day Tailscale allows private relay server, for privacy and speed / latency reasons.
Tailscale has reached general availability
121–128 of 128 posts
Re: Tailscale has reached general availability
#122Can you use tailscale with friends or does it only work with the same email address?
(Co-founder here). If you're referring to the free tier, it only supports a single email address at the moment. What some people have been doing is to create a fake Gmail address and sharing that with their family/friends to use as a common login. We've been exploring the idea for a free (or significantly discounted) "family" plan (or even something like that for small teams). Please stay tuned over the coming weeks…
thanks!
Re: Tailscale has reached general availability
#123According to the blog[1], Tailscale currently have a relay network for relaying traffic when NAT traversal does not work. I wish one day Tailscale allows private relay server, for privacy and speed / latency reasons. [1]: https://tailscale.com/blog/how-tailscale-works/
It's planned. Although note that DERP only relays the encrypted wireguard packets. All we see is "please send this ciphertext blob to pubkey X", i.e. exactly what any router on the internet sees.
Still, for latency and compliance reasons, it makes sense to allow companies to operate their own DERP relays, if they want to.
Re: Tailscale has reached general availability
#124In "The asymmetry of internet identity" you're describing a problem and currently Tailscale doesn't solve it -- it relies on google/ms/etc for identity.
I'm curious if it'd be possible to avoid using brands by just authorizing device ids like Syncthing does, without any login at all.
Re: Tailscale has reached general availability
#125I've said this before - I really love the concept but I can't get past the pricing. I don't think I'm cheap, but I work in a startup and have to justify what I spend, and USD$10/user/month is very steep for the hard-to-explain benefit of doing away with jump servers. I already use Wireguard, I have a script to add users, update configs and bounce the servers.. it's not as cool and automatic and "zero trust" but it al…
I signed up for it, I got 4320 hours left ... What's to complain about it?
Honestly, the customer in mind is not the startup with bootstrapped money. $10 a month is what people pay for a Netflix subscription, but this stuff is quite valuable. I think they may offer special plans for the poor, ailing startups but I don't see ANY reason to complain about their service.
Re: Tailscale has reached general availability
#126How about we add another pricing plan.
It's for people who like me are happy with the free plan, but still want to somehow give you money without upgrading to the $10/user plan.
Bonus points if you call the plan, the wireguard plan; and 90% of the payments go to Jason Donenfeld.
Re: Tailscale has reached general availability
#127Seems like it requires a Google or Microsoft account (or corporate SAML). No thanks!
(I'm a Tailscale co-founder) The idea is to avoid building yet another commercial service that holds onto your username and password. People have enough identities already. More details here: https://tailscale.com/blog/how-tailscale-works/ We know we keep getting feedback that people want a different way to authorize their accounts (especially for personal use), so we're looking at other options. We just really want…
So why not Webauthn?
Re: Tailscale has reached general availability
#128Earlier quoted context omitted.
Thanks for this. From the link: My teammate Dave Anderson is writing a post about all the insanity that is NAT traversal. That alone will probably be as long as this entire article. Stay tuned! I've watched countless p2p projects fail due to NAT difficulties, and spent months/years banging my head against it only to fail too. I've heard that NAT is tragically still a thing with IPv6 as well. Please, if you all make i…
(Tailscale co-founder) I'm with you on this! The NAT problem drives me nuts. That's one of the core concepts behind tailscale. Unfortunately I don't think the "open source NAT traversal as a library" idea will work; it's been tried before, but NAT is just so fiddly that the library invariably "doesn't quite work" in some weird condition and the app developer is left trying to debug NATs, which they don't know how to…
Does tailscale work in China? Does DERP penetrate the great firewall? How does tailscale protect / work against nation state actors? Are you incorporated in the US? How does Tailscale help against wide-reaching legislation like EARN IT?