Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale is pretty useful

blog.6nok.org

Post reply on HN
Print view View original

81–90 of 419 posts

Re: Tailscale is pretty useful

#81

Post by vizzier »

yjftsjthsd-h wrote: post #26
jaxtracks wrote: post #3

The features here seem to be fairly standard with most the WireGuard based VPNs these days. For example, I use Nord for my use-case which is very similar to the author's. This allows me to rsync my home directory between my laptop, tablet, phone's Termux env, and desktop (all running Linux) to maintain configuration parity and file locality regardless of where I turn these devices on, so long as they have internet. D…

What other VPNs do mesh networking? I only know of zerotier (proprietary) and nebula (FOSS except that the Android app is proprietary)

Probably the closest to tailscale, optionally selfhosted, and using wireguard meshing would be https://netbird.io/

Re: Tailscale is pretty useful

#82

Post by aranw »

tsujamin wrote: post #35

The tailscale.com/tsnet package in Go [1] is really useful if you've not looked at it before: you can make single binary HTTP or whatever servers that are only exposed inside your tailnet. Their golink project [2] is a good example (and useful itself), but I've used it to build "peer to peer" comms for one application, and to host an API and Svelte SPA to control some other things in a tailnet. [1] https://pkg.go.dev…

I've been using Tailscale for awhile now and even developed a few internal apps using tsnet as well but I had no idea about golink and it's awesome. Thanks for sharing that!

Re: Tailscale is pretty useful

#83

Post by adamors »

EVa5I7bHFq9mnYK wrote: post #28

I remember Hamachi did the same as Tailscale in the 90s, we used it to play virtual LAN DOOM. Greed killed it.

Hamachi was amazing, one of the best, most focused apps I've ever used. We were kids but it was still easy to use. Then they were bought by LogMeIn and was killed unceremoniously.

Also, it's old but not 90s old: https://swapped.cc/#!/hamachi released in 2004 actually.

Re: Tailscale is pretty useful

#84

Post by etra0 »

I work +1000km away from home, and I work by shifts, tailscale has helped me a lot on running stuff back at home.

I was even able to stream my games through the tunnel with a (decent enough) latency of 27ms with variance of 2ms.

Admittedly, I could buy a gaming laptop, but I don't want to carry a heavy laptop 4 times a month :P

Re: Tailscale is pretty useful

#85

Post by ramses0 »

See also Nebula:

https://nebula.defined.net/docs/

https://nebula.defined.net/docs/guides/quick-start/

...I believe 100% open source. You can basically hub between different devices (including iOS/Android) that are identified via certs. Recommended to have one or more public "lighthouses" so anything that can reach a lighthouse can reach any of your other servers (maybe kindof "syncthing for vpn/overlay-network?").

I've dorked around with it a little bit, but it's rare enough that I need access to my home network while out that I haven't doubled down on proper cert, key management, rotation, etc.

Re: Tailscale is pretty useful

#86

Post by CharlesW »

ezekg wrote: post #62

> I have used Tailscale only for personal reasons so far, using the free tier; they have enterprise plans for enterprise use cases that I have no idea about. Does anybody know of any good materials on the enterprise use cases and configs? e.g. blogs, screencasts, etc.

This seems like a good place to start: https://tailscale.com/blog/patterns-from-the-field-use-cases

Re: Tailscale is pretty useful

#87

Post by yegle »

klabb3 wrote: post #74
yegle wrote: post #41

CGNAT _can_ make it easier to access your server. If your Internet provider and your mobile provider is the same company, they could put all your connected devices in the same IP block within the CGNAT IP range. Now, not only you can access your device at home while away using your cellphone, you can also connect to your partner's phone with the same IP address at (or away from) home. Some Internet providers in China…

Easier than what? You mean it can in these special cases become like not having a CGNAT? > they also make the traffic within the CGNAT free So.. both data caps and breaking the principle of net neutrality?

Easier than asking family members to install a new software, then ask them to share their "node" to you.

Imagine you can remote desktop connect to your parents' computer after their phone call.

The data cap is on your cell service (the US also has that). Net neutrality is debatable given the traffic is between my own devices so presumably no one gets hurt (think of accessing and streaming from your NAS at home).

Re: Tailscale is pretty useful

#88

Post by forty »

anderiv wrote: post #52
forty wrote: post #48

Does it have "entry nodes" ? For exemple if I wanted to receive emails on my server while my home connection does not have an open port 25.

Tailscale Funnel could likely do this.

Funnel looks cool but apparently it doesn't help for non https traffic https://www.reddit.com/r/Tailscale/comments/1cyv6vf/wow_5_st...

Re: Tailscale is pretty useful

#89

Post by tjoff »

stego-tech wrote: post #49
iamdamian wrote: post #38

I'm curious to hear well-informed reasons from this crowd for why we can trust Tailscale given the non-self-hosted part of the architecture? Does it come down to Tailnet locks [1], not worrying that Tailscale will be compromised, not worrying that your home network is worth compromising, or something else? [1]: https://tailscale.com/kb/1226/tailnet-lock

Call me Cappy Paranoid, but I fall into the camp of "You should never trust a service provider, ever ," and build infrastructure accordingly; I believe this falls into an extreme interpretation of "zero trust". So while also implementing Tailnet locks and other security measures to constrict traffic flow, I'd also consider going a step further by only permitting server or resource access based on client certificate v…

Then why go with tailscale in the first place?

There is slacks nebula and other options that are completely self-hosted from the start.

Feels like such a weird hype around tailscale.

Post reply on HN