How Tailscale Works

krasin wrote: post #4

nubela wrote: post #3

Is there an open source version of this?

tailscale is open source: https://github.com/tailscale/tailscale update: apparently, only Linux client is open-source. My bad.

That is only the linux client?

Re: How Tailscale Works

#6

Post by crawshaw » Sat, Mar 21, 2020, 5:45 AM UTC

slenk wrote: post #5

krasin wrote: post #4

Earlier quoted context omitted.

tailscale is open source: https://github.com/tailscale/tailscale update: apparently, only Linux client is open-source. My bad.

That is only the linux client?

Tailscale co-founder here: that's the guts of all the clients. (It almost works on macOS too as is, just a little more work to do.) We are still open sourcing our code, there's more to come but we haven't found the time to clean it up and get it ready to release. Soon hopefully!

Re: How Tailscale Works

#7

Post by crawshaw » Sat, Mar 21, 2020, 5:47 AM UTC

mindfulplay wrote: post #2

Is there any page that describes how to actually get VPN work end to end with tailscale? I am a newbie and would like to understand.

Install the client on two devices and log in with a Gmail account. That's it.

They'll be assigned IPs and can reach each other.

(I'm a co-founder of Tailscale.)

Re: How Tailscale Works

#8

Post by manigandham » Sat, Mar 21, 2020, 6:00 AM UTC

Nice, UX looks good. Other alternatives are Zerotier [1], Pritunl [2], and Slack's Nebula [3].

1. https://www.zerotier.com/

2. https://pritunl.com/

3. https://github.com/slackhq/nebula

Re: How Tailscale Works

#9

Post by caleblloyd » Sat, Mar 21, 2020, 6:24 AM UTC

Tailscale looks really cool. BUT for a modern zero-trust solution I would like to also see a way to connect Load Balanced Applications in addition to devices.

Seems like I would need to setup a bastion device (virtual machine / container / other) with port forwarding for each Load Balanced Application since ACLs are set on the device level. The bastion would then be a single point of failure. Is there another way?

Re: How Tailscale Works

#10

Post by crawshaw » Sat, Mar 21, 2020, 6:28 AM UTC

caleblloyd wrote: post #9

Tailscale looks really cool. BUT for a modern zero-trust solution I would like to also see a way to connect Load Balanced Applications in addition to devices. Seems like I would need to setup a bastion device (virtual machine / container / other) with port forwarding for each Load Balanced Application since ACLs are set on the device level. The bastion would then be a single point of failure. Is there another way?

We have been thinking about load balancing as part of a general concept of services we want to roll out. Totally agree we need something. If you want to discuss it further, want to file an issue on github?

(Tailscale co-founder)