Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

91–100 of 468 posts

Re: Tailscale raises $100M

#91

Post by rrdharan »

ncmncm wrote: post #81
boesboes wrote: post #12

For anyone else who wonders wtf tailscale is: > Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard protocol, which means only devices on your private network can communicate with each other. It seems to take care of key distribution, nat-traversal, authen…

I thought that Tailscale was pretty interesting. Avery Pennarun, its CTO, is somebody whose judgment I am used to trusting. Then I learned that to use it, I would be dependent on authenticating using a login on one of the unaccountable internet behemoths who could take away my account for any random reason or no expressed reason at all. No, thank you.

I agree, GitHub is awful.

Re: Tailscale raises $100M

#92

Post by newhouseb »

aaronax wrote: post #52

I have heard of but never really looked in to Tailscale until today. I'm not impressed. "Fixing the Internet" is not done by layering more private network garbage on top of it. Their claim[0] that after you install Tailscale on all your devices: "This final configuration is called 'zero trust networking',” is pretty interesting. It seems this would be more like having a trusted internal network (sure it is overlaid o…

To be fair, my "misbehaving corporate firewall" is actually my apartment that has building-managed internet wherein everyone is NAT'ed to the same fiber connection.

For whatever reason, SYN flooding detection triggers when you do more than a few TCP connections per second which makes most TCP-based things super frustrating and their IT is clueless as to how to fix it.

Re: Tailscale raises $100M

#94

Post by oicU00 »

pilif wrote: post #9

With such a huge investment comes the obligation to eventually pay it back. Is this another one of my favourite tools going the way of Dropbox, 1Password and all other companies that were formed around what should be a platform feature, which took on way too large investment sums and were eventually forced to become the everything, losing sight of their core values? I sincerely hope not, but there's so much bad prece…

It’s a basic web UX over a built in Linux kernel feature

There are Docker containerized apps that manage Wireguard too

Maybe contribute to one and fret less about behavior of VC funded business and wondering if they’re actually respecting your privacy to accomplish finance goals

Re: Tailscale raises $100M

#95

Post by lmeyerov »

RL_Quine wrote: post #45
lmeyerov wrote: post #34

Earlier quoted context omitted.

Yep we had it rejected w an enterprise we work with as the org needed to own the full control plane so we couldn't bring it in, and not on the schedule for the org's security team for them to bring it in. Making a smarter, easier, and less creepily managed VPN more palatable to enterprises would be awesome, so the marketing value of their fundraise is real.

There's a kind of WIP control server implementation, it's not production ready in my opinion but it's definitely usable. https://github.com/juanfont/headscale

Super cool, and a lot of contributors!

Can this work the rest of the wireguard ecosystem (agents, UIs, ...) for a full VPN soln without involving the VC-tied company?

Re: Tailscale raises $100M

#96

Post by dimgl »

alberth wrote: post #49
xyzzy_plugh wrote: post #37

Earlier quoted context omitted.

Indeed, 1Password is practically a utility at this point, as far as I'm concerned. I really like the direction they're heading and they're solving some pretty tricky problems without compromising on security, predominantly in the enterprise domain. The experience is the same regardless of whether you're an enterprise user or a personal or family user. It's polished enough that my grandma can use it.

> I really like the direction [1Password] is heading I thought customers were complainingly loudly against their new direction of making 1Password an Electron app. Is that not the case? Note: I'm not a 1Password customer.

I didn't even notice... 1Password is great. There are some minor issues here and there but it always feels like they very quickly patch it up.

Re: Tailscale raises $100M

#97

Post by __float »

ncmncm wrote: post #81
boesboes wrote: post #12

For anyone else who wonders wtf tailscale is: > Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard protocol, which means only devices on your private network can communicate with each other. It seems to take care of key distribution, nat-traversal, authen…

I thought that Tailscale was pretty interesting. Avery Pennarun, its CTO, is somebody whose judgment I am used to trusting. Then I learned that to use it, I would be dependent on authenticating using a login on one of the unaccountable internet behemoths who could take away my account for any random reason or no expressed reason at all. No, thank you.

If you use an identity provider like Okta or OneLogin, then you're not tied to any "contentful" services like GitHub or a Google account that "historically" seem to have more problems of this type.

As far as threat models go, I can't really say I understand this one too much.

Re: Tailscale raises $100M

#99

Post by throw0101a »

legalcorrection wrote: post #57
yrro wrote: post #39

Earlier quoted context omitted.

Tailscale is one of the ways you can restore the end-to-end connectivity principle that IP introduced and that NAT destroyed.

This is kind of overstated. Even if everyone went IPv6 and gave every device a public IP address, pretty much every network would have a firewall that behaved just like NAT.

> Even if everyone went IPv6 and gave every device a public IP address, pretty much every network would have a firewall that behaved just like NAT.

No, they do not behave just like NAT. With NAT you have two problems:

* figuring out your address

* firewall hole punching

With IPv6 you already know your address and just give it to the peer you are communicating with. You then tell your firewall to allow connections from the address(:port) that the peer tells you. No STUN, no TURN, no ICE.

* https://en.wikipedia.org/wiki/Hole_punching_(networking)

* https://en.wikipedia.org/wiki/Port_Control_Protocol

* https://en.wikipedia.org/wiki/Universal_Plug_and_Play

* http://www.upnp.org/resources/documents/AnnexA-IPv6_000.pdf

This helps immensely for residential connections since people (generally) control their gateways, and with more and more higher speed (fibre) connections being done, it could help in more self-hosted and peer-to-peer services.

What one is allowed to do at the office would be dictated by the policy(s) of your employer: they could allow PCP/uPNP opening via authenticated requests for example.

Re: Tailscale raises $100M

#100

Post by ryanar »

api wrote: post #41

As the founder of what some say is a competitor (ZeroTier) I'd like to congratulate the Tailscale team. We don't really see Tailscale as the competition. We see the competition as: (1) The old school castle and moat IT model that dominates at 99% of companies. If we can disrupt this then TS, ZT, and four other upstarts could all become billion dollar companies. Right now 1-2% of this market has been disrupted at most…

I am guessing two of the other startups are strongDM and Teleport. Wonder what others are in this space and have gone to Series B+
Post reply on HN