[deleted]
Tailscale is pretty useful
231–240 of 419 posts
Re: Tailscale is pretty useful
#232[dead]
Re: Tailscale is pretty useful
#233I absolutely love Tailscale, it's been a game changer for accessing my home gear from anywhere.
Re: Tailscale is pretty useful
#234Been using it since the early days and it has become a core tool in my arsenal. Tailscale along with 5G and RDP or Parsec means I have access to my powerful home server and primary dev machine no matter where I am. Can even access it on my iPhone (only RDP).
Parsec have a mobile app as well
Re: Tailscale is pretty useful
#235I kind of have a mental block around Tailscale even though it would be useful in some cases for me, because the name "Tailscale" instantly trips all my snake oil trauma responses. Can't they call it "Weyergourd" or something?
Re: Tailscale is pretty useful
#236Also, their building up on top of a 'platform' is wonderful: funnel, exit nodes, sharing, ssh, drive etc. I wonder if they can figure out a way to distribute compute eventually via their network (not just clunky ssh): 'my' storage is already shared with 'my' nodes, why not 'my' compute? :) Seems like a great company/business.
That was actually something we debated launching before Tailscale SSH but ended up doing Tailscale SSH first because the state problem for compute was annoying and we'd seen the App Engine etc progression through the problem space and knew it could be a time suck. I still want to do it and we continue to brainstorm on the problem of state management and how to do it in an HA way, so you can run services where the com…
Looks like the layers are there for a Tailscale API: I could imagine writing a platform-independent Go 'app' that uses funnel+drive that could 'float' around the nodes.
Anyway, a fun problem (or worse, a solution looking for a problem as I couldn't immediately think of a problem that would require it just yet. May be distributed training and such)
Cool to see a bradfitz reply though!
Re: Tailscale is pretty useful
#237Re: Tailscale is pretty useful
#238Earlier quoted context omitted.
Call me Cappy Paranoid, but I fall into the camp of "You should never trust a service provider, ever ," and build infrastructure accordingly; I believe this falls into an extreme interpretation of "zero trust". So while also implementing Tailnet locks and other security measures to constrict traffic flow, I'd also consider going a step further by only permitting server or resource access based on client certificate v…
> Is that a gigantic PITA to implement? Oh heck, you betcha it is I use my own self-hosted Wireguard VPN server. I agree with a lot of what you were saying about client certificates etc. And I plan to eventually do that sort of thing on some of my services in my own Wireguard VPN too. But in terms of Tailscale, if you are going to set up all kinds of client certificate things that will take a lot of time and effort,…
> Unless like OP your ISP has put CGNAT on you.
I run Wireguard on a VPS and route public traffic with it over Wireguard to my home machine.
Are you saying my ISP must not be CGNAT or else it wouldn't work?
Re: Tailscale is pretty useful
#239Earlier quoted context omitted.
Wireguard?
Wireguard doesn't do NAT traversal on its own, which is, IMHO, the killer feature of Tailscale.
Taking on all the monolithic complexity of Tailscale just to get NAT traversal can be arguably not worth it, e.g. https://news.ycombinator.com/item?id=42132131
Fair enough if you're stuck behind a CGNAT though.
Re: Tailscale is pretty useful
#240I have to point out that their online videos are amazing to leaen how to quickly set up certain features like SSH. In less than 5 minutes I had VSCode on a Macbook Air connected to my desktop machine running Linux on a completely different network.