Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale is pretty useful

blog.6nok.org

Post reply on HN
Print view View original

51–60 of 419 posts

Re: Tailscale is pretty useful

#51

Post by porridgeraisin »

iamdamian wrote: post #38

I'm curious to hear well-informed reasons from this crowd for why we can trust Tailscale given the non-self-hosted part of the architecture? Does it come down to Tailnet locks [1], not worrying that Tailscale will be compromised, not worrying that your home network is worth compromising, or something else? [1]: https://tailscale.com/kb/1226/tailnet-lock

If you really want to host the control server yourself, you can use this open source implementation of it at https://github.com/juanfont/headscale

Re: Tailscale is pretty useful

#53

Post by deuschelandian »

Trumpi wrote: post #6

I was once in South Africa and needed to look up my prescriptions in the CVS app. I had lost my pills and needed to show a local pharmacist what I needed. CVS geoblocked me. Luckily I had a TailScale exit node running at home, which solved the problem.

When I was in Germany - Capital One blocked access to my account unless I confirmed via SMS or tapping my card. Both of which I didn’t have with me.

Tunnelling into my home machine I was able to access the account and transfer money I needed.

Sure a VPN might be able to do this too but it’s nice being able to exit via a connection you control.

I can also watch Plex movies without exposing ports.

Re: Tailscale is pretty useful

#54

Post by erulabs »

Tailscale also allows you to issue valid TLS certificates (`tailscale cert`), which is crazy useful for certain local development tasks, EG developing SSO for a mobile application where the SSO provider mandates TLS and the mobile devices dont easily allow you to bypass self-signed certificates. They keep piling on awesome features, big fan.

The Tailscale k8s operator is also great.

Re: Tailscale is pretty useful

#56

Post by dugmartin »

EVa5I7bHFq9mnYK wrote: post #28

I remember Hamachi did the same as Tailscale in the 90s, we used it to play virtual LAN DOOM. Greed killed it.

The Hamachi UI and UX were great. I was very sad when it got bloated and then killed like a beached whale. I just looked and I guess it lives on as a whalezombie at https://vpn.net/.

Re: Tailscale is pretty useful

#57

Post by textlapse »

Also, their building up on top of a 'platform' is wonderful: funnel, exit nodes, sharing, ssh, drive etc.

I wonder if they can figure out a way to distribute compute eventually via their network (not just clunky ssh): 'my' storage is already shared with 'my' nodes, why not 'my' compute? :)

Seems like a great company/business.

Re: Tailscale is pretty useful

#58

Post by some-guy »

iamdamian wrote: post #38

I'm curious to hear well-informed reasons from this crowd for why we can trust Tailscale given the non-self-hosted part of the architecture? Does it come down to Tailnet locks [1], not worrying that Tailscale will be compromised, not worrying that your home network is worth compromising, or something else? [1]: https://tailscale.com/kb/1226/tailnet-lock

I use Tailscale a lot. I don't fully trust anybody but I trust them more than I trust myself to set it up properly.

Re: Tailscale is pretty useful

#59

Post by yjftsjthsd-h »

radlad wrote: post #37
yjftsjthsd-h wrote: post #26

Earlier quoted context omitted.

What other VPNs do mesh networking? I only know of zerotier (proprietary) and nebula (FOSS except that the Android app is proprietary)

Shameless plug, but some of the Nebula team (including myself) works on https://www.defined.net/ (proprietary managed Nebula networks.) Also, ZeroTier is "open-source ish." They use the BSL license for most of their code ( https://www.zerotier.com/blog/on-the-gpl-to-bsl-transition/ ) and I believe you can self-host ( https://docs.zerotier.com/selfhost/ )

> Shameless plug, but some of the Nebula team (including myself) works on https://www.defined.net/ (proprietary managed Nebula networks.)

My one objection to Nebula is that its Android app is proprietary, and your response is to plug the even more proprietary way to run it?

> Also, ZeroTier is "open-source ish."

So it's not FOSS.

Post reply on HN