Why is there a post by tailscale on the front page every single day?
In 2013, Docker was on the front page every day.
Sometimes a BFD tech comes around. Even if it’s not immediately obvious, Tailscale is a BFD.
Tailnet Lock
81–90 of 119 posts
Re: Tailnet Lock
#82Earlier quoted context omitted.
It's a usability thing, IMO. Historically you had enterprise-grade VPNs that cost a lot of money, or OpenVPN. Both ran over IPSec or SSL, and neither were super straightforward to config/maintain, nor were they particularly performant. Then came wireguard, which is awesome, but wireguard is just a transport. It doesn't have all the UX niceties built on top of it, like registering clients or generating / distributing…
What does everyone use it for?
The thing that sold me on it was managing remote (and I mean remote - like in a field in west Virginia with solar + cell) nodes. We started with using manually provisioned wireguard tunnels, but wg isn't great at things like failing over. Plus, our core infrastructure is on a slightly dynamic IP and we didn't want to route image upload through GCP. Tailscale made this problem go away . And then we got hooked on it for all developer access, having GitHub actions be able to push into our deployment, etc. It's pretty magical.
Re: Tailnet Lock
#83Earlier quoted context omitted.
It's a usability thing, IMO. Historically you had enterprise-grade VPNs that cost a lot of money, or OpenVPN. Both ran over IPSec or SSL, and neither were super straightforward to config/maintain, nor were they particularly performant. Then came wireguard, which is awesome, but wireguard is just a transport. It doesn't have all the UX niceties built on top of it, like registering clients or generating / distributing…
What does everyone use it for?
I use it to link together my research computer, laptop, and home-servers to give me access while traveling or working from home.
Re: Tailnet Lock
#84Earlier quoted context omitted.
This is such an outstanding response to the existence of Headscale that I struggle to understand it. Why not just open source Tailscale's control server? Don't get me wrong though, what you guys are doing now is great. Edit: some explanation here: https://tailscale.com/blog/opensource/
My guess would have to be that their version is probably deeply integrated with the rest of the product and infra that it doesn’t make sense. Plus there’s the added benefit to their paying customers to know that we have an out if needed. It reduces friction in starting to use the product.
There’s another added benefit that they get two different implementations of the same protocol. When you have multiple implementations, you effectively have a double check on the protocol design. This should make the project as a whole significantly better engineered.
It’s quite clever from Tailscale.
Re: Tailnet Lock
#85Earlier quoted context omitted.
This is such an outstanding response to the existence of Headscale that I struggle to understand it. Why not just open source Tailscale's control server? Don't get me wrong though, what you guys are doing now is great. Edit: some explanation here: https://tailscale.com/blog/opensource/
My guess would have to be that their version is probably deeply integrated with the rest of the product and infra that it doesn’t make sense. Plus there’s the added benefit to their paying customers to know that we have an out if needed. It reduces friction in starting to use the product.
Or their own server is too big for small use so not welcomed by selfhoster, like Bitwarten/Vaultwarden case.
Re: Tailnet Lock
#86Earlier quoted context omitted.
For personal stuff, it feels totally new. It's like having your own intranet. It's like being on LAN with all of your personal devices, plus any bridged into your tailnet, at all times, anywhere on earth. You can route your internet traffic through another machine, or not (default.) It has built-in basic file transfer, and a nice little SSH bridge. Technologically, it's based on Wireguard. Wireguard is fast; really f…
Did you ever use Zero Tier before?
I have and it works just as fine for me.
TailScale seems to have a better ui and more tooling (File sharing, SSH, ...). Even though those recently led to RCE[0]
Re: Tailnet Lock
#87Earlier quoted context omitted.
For personal stuff, it feels totally new. It's like having your own intranet. It's like being on LAN with all of your personal devices, plus any bridged into your tailnet, at all times, anywhere on earth. You can route your internet traffic through another machine, or not (default.) It has built-in basic file transfer, and a nice little SSH bridge. Technologically, it's based on Wireguard. Wireguard is fast; really f…
Did you ever use Zero Tier before?
When I tried Zero Tier it had trouble with bonjour/rendezvouz/mDNS zeroconf host names. Getting it up and running on a new device was also a bit more complicated than Tailscale (although maybe at the expense of needing to trust TS more than you needed to trust ZT?)
Re: Tailnet Lock
#88Earlier quoted context omitted.
It's a usability thing, IMO. Historically you had enterprise-grade VPNs that cost a lot of money, or OpenVPN. Both ran over IPSec or SSL, and neither were super straightforward to config/maintain, nor were they particularly performant. Then came wireguard, which is awesome, but wireguard is just a transport. It doesn't have all the UX niceties built on top of it, like registering clients or generating / distributing…
What does everyone use it for?
Throwing in my usecases:
- Running a Jupyterlab instance on my desktop PC (WSL) and use it through my laptop from anywhere. Can also be accessible through phone/tablet if needed
- Simple routing of other services my PC exposes (Jellyfin for now)
- Access dev services running on my laptop through my phone without checking IP all the time
- Good replacement for AirDrop using Taildrop file sharing. AirDrop errors out if I try to use it on a "public" network (ex: University Wi-Fi)
Re: Tailnet Lock
#89Earlier quoted context omitted.
What does everyone use it for?
I have it on all my personal and family servers and devices. I use it so that for both myself and my family all our internal stuff (unraid network shares, jellyfin, homepages, photo backups, etc, etc) "just works" for the less technical members of the family even when they're not at home. It seamlessly detects when the peer is local so it doesn't route out to the internet and back, has an easy ACL to segment things (…
>It seamlessly detects when the peer is local so it doesn't route out to the internet and back
One of my use cases for Tailscale was connectivity between my primary NAS and an off-site NAS I use for backups. Being able to bring my NAS to the same site/network I had set-up the off-site NAS and just have things work over the LAN without reconfiguring anything was a wonderful surprise.
(Yes, I’m aware I could save some overhead by reconfiguring but looking at the network traffic monitor I was happy enough with the throughput I got though Tailscale’s LAN routing)
Re: Tailnet Lock
#90I have little to no idea what Tailscale does. Is it a VPN like Mullvad? What makes it so special?
Ive heard a bit about tailscale networks connecting devices together easily. Is it for your own network only, or can other people access your tailscale devices directly as well?
Ie, I host a minecraft server on my linux desktop. Can tailscale help me in the use case of providing an IP to people to connect to it? Or am I just back to regular old port forwading and my external IP?