Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale SSH is now Generally Available

tailscale.com

Post reply on HN
Print view View original

21–30 of 98 posts

Re: Tailscale SSH is now Generally Available

#21

Post by redrove »

jgrahamc wrote: post #18
redrove wrote: post #12

Earlier quoted context omitted.

Clouflare Tunnels are generally used for http(s) traffic more so than SSH, this is just Tailscale's SSH offering. The equivalent http(s) side of things from Tailscale would be Tailscale Funnel [0], although it's incomplete since you can't BYO domain to TS Funnel. In essence, CF Tunnel = Tailscale Funnel w/ BYOD + Tailscale SSH [0] https://tailscale.com/kb/1223/funnel

Cloudflare Tunnel can absolutely be used for more than HTTP(S): https://blog.cloudflare.com/ssh-raspberry-pi-400-cloudflare-...

Where exactly did I say it can't be used for more than http(s)? I just said it's generally used for that, and

> In essence, CF Tunnel = Tailscale Funnel w/ BYOD + _Tailscale SSH_

> CF Tunnel = ... Tailscale SSH

Re: Tailscale SSH is now Generally Available

#22

Post by stavros »

wenyuanyu wrote: post #10

How does it compare with cloudflare's tunnels? [0] I have been using Cloudflare's cloudflared tunnels. It was great for tunneling ssh traffic behind firewalls. And it starts free. [0] https://developers.cloudflare.com/cloudflare-one/connections...

It's very different, CF tunnel is a reverse proxy to your service, Tailscale SSH manages authentication to machines inside your VPN. I can't see any resemblance, personally.

Re: Tailscale SSH is now Generally Available

#23

Post by orthoxerox »

mkl wrote: post #19
supermatt wrote: post #14

Earlier quoted context omitted.

And it also seems like its wrong (or outdated?), Given they offer "SSO with any IdP" on ALL plans, including the free (personal) one: https://tailscale.com/pricing

It says updated 2024-03-13 from source https://tailscale.com/pricing , but "SSO with any IdP" is in the Starter plan before that [edit: no, I'm wrong, it used to say "standard" not "any"]: https://web.archive.org/web/20240309045009/https://tailscale... Are they talking about something different?

SSO Tax is usually about using your private SSO, not Google or GitHub. If they say "any IdP", then the data on ssotax must be out of date.

Re: Tailscale SSH is now Generally Available

#25

Post by mkl »

orthoxerox wrote: post #23
mkl wrote: post #19

Earlier quoted context omitted.

It says updated 2024-03-13 from source https://tailscale.com/pricing , but "SSO with any IdP" is in the Starter plan before that [edit: no, I'm wrong, it used to say "standard" not "any"]: https://web.archive.org/web/20240309045009/https://tailscale... Are they talking about something different?

SSO Tax is usually about using your private SSO, not Google or GitHub. If they say "any IdP", then the data on ssotax must be out of date.

Oh, you're right. It used to say "SSO with standard IdP" and now says "SSO with any IdP". The site is out of date, despite its claimed update date.

Re: Tailscale SSH is now Generally Available

#26

Post by danmur »

ikiris wrote: post #2

Just gonna note this is still a thing https://ssotax.org/

I don't get what's wrong with charging more for SSO? They're in the business of making money, and if you need SSO and you need their service you're more likely to have money. It's nothing to do with the feature itself.

Re: Tailscale SSH is now Generally Available

#27

Post by fl7305 »

How secure is Tailscale in general, and their new SSH offering?

I assume the crypto is unbreakable for outside parties that just sniff the traffic along the way.

But what if Tailscale gets hacked? Are my keys available there for someone else to connect into my network? How hard would it be for the hacker to add their own machine to my network?

Re: Tailscale SSH is now Generally Available

#28

Post by timrichard »

leastangle wrote: post #5

We use Tailscale quite heavily and the SSH feature. Along with many other features, it is great. However, the article doesn't mention pricing, which for me personally seems quite high at $18/month/user. [1] [1] https://tailscale.com/pricing

I've been impressed with ZeroTier. The free tier is pretty generous. Plus the desktop client allows you to access more than one network/account at the same time. IIRC, Tailscale requires you to switch between accounts.

Re: Tailscale SSH is now Generally Available

#29

Post by earnesti »

danmur wrote: post #26
ikiris wrote: post #2

Just gonna note this is still a thing https://ssotax.org/

I don't get what's wrong with charging more for SSO? They're in the business of making money, and if you need SSO and you need their service you're more likely to have money. It's nothing to do with the feature itself.

I don't think there is anything wrong about it, but I think it is a good thing to be informed about it, especially for those involved with smaller businesses.

Re: Tailscale SSH is now Generally Available

#30

Post by irusensei »

fl7305 wrote: post #27

How secure is Tailscale in general, and their new SSH offering? I assume the crypto is unbreakable for outside parties that just sniff the traffic along the way. But what if Tailscale gets hacked? Are my keys available there for someone else to connect into my network? How hard would it be for the hacker to add their own machine to my network?

Tailscale uses the WireGuard protocol.

About the question about Tailscale being hacked or injecting hosts in your network. With the default configuration yes. There is Tailscale lock https://tailscale.com/kb/1226/tailnet-lock In which you need to sign the devices participating in your network. The signing keys are in your device.

Post reply on HN