Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

421–430 of 468 posts

Re: Tailscale raises $100M

#421

Post by euroderf »

josephruscio wrote: post #243
chimen wrote: post #193

Funding scares me. It bring sharks onboard who do not share the same vision. They will demand revenue and ROI above all else. I like Tailscale but I hate this business model down to the core (Netlify as an example). Tailscale was doing fine as it was, capable people there already. It quickly became an "exit type of business", too quickly. These companies usually bring something really easy to use, let people onboard…

Tailscale investor here. I can assure you we share the same vision with the founders.

My use case is like many others' here: accessing a remote Raspberry Pi. Please do not start charging for this kind of simple setup ! If you want to charge for IoT-type stuff, add a new layer of added value on top of the current wonderful free service.

Re: Tailscale raises $100M

#422

Post by SahAssar »

yawaramin wrote: post #419
SahAssar wrote: post #346

Earlier quoted context omitted.

Requiring you to disclose info to google, microsoft, okta or onelogin can very clearly be an "attitude towards privacy", right?

Not necessarily. It's possible to create a new Google account (e.g.) just for Tailscale, and not use it for anything else. That way the only thing Google can know about it is that it's used to log in somewhere.

Google requires a phone number to sign up these days, and you'd need to isolate google & tailscale in a private window or a firefox privacy container. If you use chrome you'd also get auto-logged in to chrome with your google account.

IMO there is no real way to use google in a privacy-protecting way.

Re: Tailscale raises $100M

#423

Post by benoliver999 »

discardedrefuse wrote: post #410
api wrote: post #340

Earlier quoted context omitted.

> Their self-hosted option is a joke. There is no webui. There's a community developed one: https://github.com/key-networks/ztncui

I had looked at this. It doesn't seem like they've implemented anything to handle firewall rules. They may not even be able to, seeing as how that part of ZT is closed source. Also, this doesn't solve the problem with mobile apps, so the whole thing was a moot point for me.

The mobile app does work with the self hosted option, we use it at work.

Re: Tailscale raises $100M

#424

Post by benoliver999 »

flemhans wrote: post #112

What's the state of affairs when it comes to self-hosting? I'm waiting to deploy either Nebula, ZeroTier, or Tailscale, but we don't want to rely on third parties for auth or coordination.

Nebula is the only completely self hosted option I think. But I couldn't get NAT traversal to work and it's the main reason I want a system like this.

Tailscale hosts all the auth and coordination stuff and uses SSO.

Zerotier lets you host an auth server, which also handles connections, but when required some already-established connections go through zerotier servers (encrypted).

We use the latter option at work

Re: Tailscale raises $100M

#425

Post by Handytinge »

zanny wrote: post #224
lazzlazzlazz wrote: post #146

Earlier quoted context omitted.

> a direct ring of trust with friends The vision you outlined is great, except it doesn't work. The trust assumptions are too high, and even a great product like Tailscale seems to rely completely on centralized identity providers (you have to choose Google, Microsoft, or Github on sign-in). Ultimately, if you want to maintain full control of your online identity and network, you'll probably need some of the decentra…

I self host headscale as my control node of my tailscale vpn so no sign ins required, I just give keys out to anyone I want in my vpn. My problem is the client doesn't support multiple servers, so I can't have a work vpn and a home vpn, not even with an easy toggle - you have to run tailscale with different conf options for both. Changing namespaces also isn't easy, so having friends and family segregated even on one…

I'd love to try headscale, but a bit of research shows that the tailscale macOS client requires a CLI param to connect to a custom server, registry keys for Windows, Android client requires custom compile, and there's no iOS client at all.

Unfortunately if I need to bring anyone into my mesh network who is non technical, this is now a non starter.

Re: Tailscale raises $100M

#426

Post by benoliver999 »

tomputer wrote: post #262

For almost a decade I have worked with IPsec and OpenVPN solutions for both client and site-to-site VPN tunnels. On enterprise hardware, community/proprietary software and at public cloud providers. I still work with these because today many vendors only support IPsec. A few years ago I discovered WireGuard and I was really amazed how easy it was to setup a tunnel. Especially if you've dealt with IPsec before. It fel…

We used openvpn for years and it felt like every client had an obscure reason it wouldn't work, and we'd have to find a workaround.

Installed zerotier and it couldn't be simpler now.

Re: Tailscale raises $100M

#427

Post by Handytinge »

naikrovek wrote: post #352
ncmncm wrote: post #338

Earlier quoted context omitted.

No. I would be happy to pay for service, but they offer no choice but to rely on somebody else's authentication, regardless.

read harder next time. https://tailscale.com/kb/1119/sso-saml-oidc/

This isn't a very nice comment (from my reading anyway).

> Be kind. Don't be snarky. Have curious conversation; don't cross-examine. Please don't fulminate. Please don't sneer, including at the rest of the community.

> Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

Re: Tailscale raises $100M

#428

Post by ncmncm »

naikrovek wrote: post #352
ncmncm wrote: post #338

Earlier quoted context omitted.

No. I would be happy to pay for service, but they offer no choice but to rely on somebody else's authentication, regardless.

read harder next time. https://tailscale.com/kb/1119/sso-saml-oidc/

Thank you. It is hard to interpret what this might mean, for me.

Re: Tailscale raises $100M

#429

Post by jhugo »

zinekeller wrote: post #230
throw0101a wrote: post #227

Earlier quoted context omitted.

> No, no, no, no. You haven't really experienced the quality of IPv6 routers at home. I've been running IPv6 at home >2 years. You're telling me that my own experience is invalid?

No, not necessarily, but if you're using an aftermarket router rather than an ISP-supplied router, then this rather long list is not applicable to you.

I'm guessing you're in the US? Haven't had any problems with IPv6 on ISP-supplied routers in UK, NL, DE, CN, HK, VN, TH, SG over the last 10y or so, seems like a solved problem for most of the world.

Re: Tailscale raises $100M

#430

Post by PLG88 »

_abox wrote: post #280
discardedrefuse wrote: post #184

Earlier quoted context omitted.

> I’ve been dreaming lately of a tor-like network that’s based loosely on the idea of tailnets. Rather than blockchain bullshit, you’d have a direct ring of trust with friends, and then you could set up access policies to forward packets for people you don’t trust, but who know someone you do trust. Might want to check out Yggdrasil. It lets you can create a real mesh routed, E2E encrypted network. You can keep your…

Thanks, I thought I knew all the major mesh VPN options (tinc, nebula, tailscale, zero tier, hamachi) and yet I never heard of yggdrasil. This is the kind of comment I love HN for!

Here is another (sort of), OpenZiti - https://openziti.github.io/. OpenZiti provides a mesh overlay network built on zero trust priinciples with outbound only connections so that we do not need inbound ports or link listeners. Similar to TS, you can host anything anywhere and has options to deploy on any popular host OS or as a virtual appliance.

What makes it realluy unique though is that it can actually be embedded inside the application via a suite of SDKs. Yes, private, zero trust connectivity inside an application! That provides the highest security and convenience as it can be completely transparent to the user!

Disclaimer, I work for the company who built and maintains OpenZiti so I am opinionated.

Post reply on HN