Live data from Hacker News

Tailscale Peer Relays is now generally available

tailscale.com

81–90 of 267 posts

Re: Tailscale Peer Relays is now generally available

#81
post #2

I just set this up the other day, and I got my ping to drop from 16 to 10ms, and my bandwidth tripled, when connecting from a remote natted site to a matter desktop my house. Together with Moonlight/Sunshine I can now play Windows games on my Linux desktop from my MacBook, with 50mbps/10ms streaming. So far so good! Not a single port forwarded, I just set my router up as peer node.

May want to give Apollo a try: https://github.com/ClassicOldSong/Apollo (re Sunshine)

Re: Tailscale Peer Relays is now generally available

#82

Earlier quoted context omitted.

I see a white X in a blue box to the lower right of the modal. Is it that?

That was it, ok now I feel stupid.

Oh man, I even read all the comments and still couldn't find it when I finally clicked on the image link. Terrible UX.

cc: @apenwarr (tailscale founder), might want to have someone fix this and move the close button to the top right of the modal, not the bottom right.

Re: Tailscale Peer Relays is now generally available

#83

If you're sold on Tailscale due to them "being open" (as they semi-officially support the development of Headscale), keep in mind, that at the same time some of their clients are closed source and proprietary, and thus totally controlled by them and the official distribution channels, like Apple. Some of the arguments given for this stance are just ridiculous: > If users are comfortable running non-open operating sys…

Went with ZeroTier and Netbird, they're not too bad.

Re: Tailscale Peer Relays is now generally available

#84
post #57
post #36

Earlier quoted context omitted.

I have the same fears. Last year they have publicly stated they are not interested in acquisition [0] > Pennarun confirmed the company had been approached by potential acquirers, but told BetaKit that the company intends to grow as a private company and work towards an initial public offering (IPO). > “Tailscale intends to remain independent and we are on a likely IPO track, although any IPO is several years out,” Pe…

Just note i doubt Tailscale were first popular vpn manager as i remember many hobby users are Zerotier converts and also much older products like Hamachi. Tailscale have build great product around wireguard (which is quite young) and they have great marketing and docs. But they are hardly first VPN service - they might not even be the most popular one.

Yes, I ambiguously said "started this space"... and to be honest even in the most generous interpretation that's probably incorrect, maybe ZeroTier started "this space", in that it had NAT busting mesh networking first.

As far as I understand Tailscale brought NAT busting mesh networking to wireguard + identity first access control, and reduced configuration complexity. I think they were the first to think about it from an end to end user perspective, and each feature they add definitely has this spin on it. It makes it feel effortless and transparent (in both the networking use sense and cryptography sense)... So i suppose that's what I mean by started, TS was when it first really clicked for a larger group of people, it felt right.

Re: Tailscale Peer Relays is now generally available

#85
post #3

How does Tailscale make money? I really like their service but I'm worried about a rug pull in the future. Has anyone tried alternative FOSS solutions? Also, sometimes it seems like I get rate limited on Tailscale. Has anyone had that experience? This usually happens with multiple SSH connections at the same time.

I pay $5 a month, and my company has a license for every employee.

Re: Tailscale Peer Relays is now generally available

#86
post #67
post #33

Earlier quoted context omitted.

Peer relays are a bit different from our previously available Custom DERP servers. While the custom DERPs do relay traffic, they also require a bunch of configuration and management for their other jobs and they open up availability concerns that are pretty tough for our average customer. Conversely Peer Relays are built on top of the shoulders of DERP. For example, they don't need to do peer discovery set connection…

I’m so confused. What is the difference between a peer relay and a DERP server that is self hosted? The issue I have is I’m trying to connect two devices where one is behind a CGNAT that always causes the connection to be relayed even though the other one is not behind a cgnat with proper port forwarding. Would a peer relay solve this but is it like a DERp where I have to host it on a VPS separate from my existing tw…

You should be able to stand up a peer relay on an existing tailscale device - so your proposal is correct! Try setting one of the devices up as a peer relay per the docs here: https://tailscale.com/docs/features/peer-relay

Re: Tailscale Peer Relays is now generally available

#87
post #34

Earlier quoted context omitted.

How do you handle the do-before-thinking devs? Or the kinda low-to-mid performing devs? Most companies has one or a few of those, right? They help the company machine go around by doing the somewhat boring stuff over and over again. Tailscale in a company/developer env seems awesome when you know what you are doing and (potentially) terrifying otherwise. Does someone set up detailed ACLs for what's allowed? How well…

> How do you handle the do-before-thinking devs? Isn't that exactly what tailscale is built to accommodate - zero trust? You set up ACLs and other permissions to not allow people to do more than the damage you can tolerate.

Zerconf ≠ zero trust. The difference could not be more material in this context.

Re: Tailscale Peer Relays is now generally available

#88
post #3

How does Tailscale make money? I really like their service but I'm worried about a rug pull in the future. Has anyone tried alternative FOSS solutions? Also, sometimes it seems like I get rate limited on Tailscale. Has anyone had that experience? This usually happens with multiple SSH connections at the same time.

[dead]

Re: Tailscale Peer Relays is now generally available

#89
post #8
post #2

I just set this up the other day, and I got my ping to drop from 16 to 10ms, and my bandwidth tripled, when connecting from a remote natted site to a matter desktop my house. Together with Moonlight/Sunshine I can now play Windows games on my Linux desktop from my MacBook, with 50mbps/10ms streaming. So far so good! Not a single port forwarded, I just set my router up as peer node.

What hardware do you use on the networking side?

Nothing special, an edgerouter that allows installing tailscale

Re: Tailscale Peer Relays is now generally available

#90
post #19
post #2

I just set this up the other day, and I got my ping to drop from 16 to 10ms, and my bandwidth tripled, when connecting from a remote natted site to a matter desktop my house. Together with Moonlight/Sunshine I can now play Windows games on my Linux desktop from my MacBook, with 50mbps/10ms streaming. So far so good! Not a single port forwarded, I just set my router up as peer node.

There are several ports open (you dont open them, Tailscale does), including for peer relay. Some are vpn ports, but the ports for relay servers are not for VPN so my guess is that the software that listens to those ports is a lot less secure (compared to Wireguard or OpenVPN).

Yes my router has open ports, but it does not do any port forwarding. So I can 'directly' connect any device behind my router without my router needing to know any specifics of which device that is. And I don't need to do any port forwarding of anything on my network and thus expose them to the whole internet; I just expose them to the users of my tailscale network (only me)
Post reply on HN