5 ms·

Really fascinating work! I enjoyed reading this article. Do you actually have tunnels between every device? Wondering, how does this scale?

• crawshaw 7y ago
  Tunnels are created between any two devices that try to talk. It scales great, not concentrating connections makes it easy. Tunnels are very lightweight and the only machines with lots of tunnels are servers that are already provisioned for talking to lots of machines. (Tailscale co-founder)
  • forgot_old_user 7y ago
    Interesting :) Follow up, trying to cement my understanding here. If two devices may talk to each other (as defined in the ACL), only then they get to know each other's public keys, right? If so, how would this ACL be negated later- do the devices forget eachother after this disallow?
    • crawshaw 7y ago
      Yes, you only get the public keys of machines you can talk to. Later the server asks the client to forget the key if they can no longer talk. Additionally, we rotate keys. For security sensitive users we can rotate these keys daily.
      • forgot_old_user 7y ago
        Thank you! Fascinating work. Easily readable, yet highly informative article. Hope you are the ones that kill off VPNs!