Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How Tailscale Works

tailscale.com

Post reply on HN
Print view View original

51–60 of 82 posts

Re: How Tailscale Works

#51

Post by nif2ee »

jrockway wrote: post #44
nif2ee wrote: post #42

HN promoted Tailscale worth of million dollars of advertising so far for free. This is really disgusting and the biggest proof that relations >>> product. Rename this website to Tailscale News.

I mean... the people that founded the company have been long time contributors to the site. You've probably read a hundred of Avery's articles here. What are you doing that's interesting? Post it here and you can get the free advertising too.

When every Wireguard post gets immediately hijacked to become a promotion for this company, when at least 2 threads get to the HN frontpage each week then something is totally very fishy. I understand they are popular and have strong connections with many powerful people here. But at least this systematic promotion should be mentioned as promotion and not some innocent thread because it's totally organized and intentional.

Re: How Tailscale Works

#52

Post by nif2ee »

When every Wireguard post gets immediately hijacked to become a promotion for this company, when at least 2 threads get to the HN frontpage each week then something is totally very fishy. I understand the founders are popular and have strong connections with many powerful people here. But at least this systematic promotion should be mentioned as promotion and not some innocent thread because it's totally organized and intentional.

Re: How Tailscale Works

#53

Post by tprynn »

eps wrote: post #28

Add UDP relays and TCP hole punching and it'll finally be a better take on Hamachi :) https://swapped.cc/hamachi

If you read the article, it seems like it has both of those features, though I'm not sure what exactly you mean by "UDP relay".

Re: How Tailscale Works

#54

Post by [deleted] »

manigandham wrote: post #8

Nice, UX looks good. Other alternatives are Zerotier [1], Pritunl [2], and Slack's Nebula [3]. 1. https://www.zerotier.com/ 2. https://pritunl.com/ 3. https://github.com/slackhq/nebula

[deleted]

Re: How Tailscale Works

#55

Post by api »

benreesman wrote: post #20

It sounds like these guys have done their homework (from a distributed systems PoV, I don’t know much about the security side). IIUC it’s an application of one of my favorite design patterns: “this part needs CP, the rest is more flexible”. It’s remarkable how far this gadget can take you.

Do you mean least privilege/ minimal centralization? I wrote this rant-ish post on the concept a while back.

http://adamierymenko.com/decentralization.html

It describes a route whereby I got to the concept, but I doubt I'm the first one there. Everything gets reinvented over and over again in this field.

Re: How Tailscale Works

#56

Post by ksmail99 »

I have need to connect all of my developers to multiple AWS accounts and have them work from hotels, home and company sites. AWSVPN only works for single account and needs certificates to be distributed to everyone. I like the way your solution is described but am unclear whether it will work for us?

Re: How Tailscale Works

#57

Post by zimbatm »

manigandham wrote: post #8

Nice, UX looks good. Other alternatives are Zerotier [1], Pritunl [2], and Slack's Nebula [3]. 1. https://www.zerotier.com/ 2. https://pritunl.com/ 3. https://github.com/slackhq/nebula

I was coming here to say that it looks a lot like ZeroTier. The main differentiator as far as I know is the support for SSO and MFA.

With ZeroTier, the client connects to the network using a private shared key and then needs to be approved on the control plane independently.

Re: How Tailscale Works

#58

Post by api »

zimbatm wrote: post #57
manigandham wrote: post #8

Nice, UX looks good. Other alternatives are Zerotier [1], Pritunl [2], and Slack's Nebula [3]. 1. https://www.zerotier.com/ 2. https://pritunl.com/ 3. https://github.com/slackhq/nebula

I was coming here to say that it looks a lot like ZeroTier. The main differentiator as far as I know is the support for SSO and MFA. With ZeroTier, the client connects to the network using a private shared key and then needs to be approved on the control plane independently.

ZeroTier original (and still main) author here. Objectively speaking another difference is the ACL scheme which seems perhaps less powerful than our own rules engine but easier to use. The ACLs are closer to intents while ZT rules require some TCP/IP knowledge (like raw iptables or pf).

We have plans to address this ourselves more with a higher level UI to build rules from intents and common patterns. Also have more auth integration planned, but the list is long.

Re: How Tailscale Works

#59

Post by mindfulplay »

nif2ee wrote: post #52

When every Wireguard post gets immediately hijacked to become a promotion for this company, when at least 2 threads get to the HN frontpage each week then something is totally very fishy. I understand the founders are popular and have strong connections with many powerful people here. But at least this systematic promotion should be mentioned as promotion and not some innocent thread because it's totally organized an…

I have no idea who the founders are. (I do have an idea of who bradfitz is).

I have no connection to these people and still find this technology as something new and fascinating.

It's hard to see a genuinely new concept in startups these days given the million SaaS PaaS startups all clenching over low hanging fruit...

Post reply on HN