3 ms·

Sorry you didn't like the article :) We posted another one this past weekend called "How Tailscale works" that this crowd seems to enjoy more, at least based on

Sorry you didn't like the article :) We posted another one this past weekend called "How Tailscale works" that this crowd seems to enjoy more, at least based on upvotes: https://news.ycombinator.com/item?id=22644357 https://news.ycombinator.com/item?id=22644357 And yes, we do think of ourselves as a "modern Hamachi." Hamachi was great! (I'm from Tailscale)

basch 7y ago
I thought that article last week was much more interesting. /Techsupport side note. I have a Windows laptop, and for the life of it the client will not connect to the service. How do I troubleshoot this thing? Its almost too simple. Are there logs? https://i.imgur.com/QRLkQl1.png https://i.imgur.com/QRLkQl1.png /And is there any way to get to test the magic dns? Will there be better ways to set up relay nodes, and then SEE the design of the network? Can I set up a relay node on Windows, and only for specific IP addresses instead of entire subnets? /On the topic of "security within the lan is just a nuisance" I do appreciate this being more of a unix philosophy like single tool than kitchen sink. I do think there would be a market for a companion piece of cloud software that acts as a firewall orchestrator between devices, surfaces logs, allows you to block or allow specific connections between specific devices, and to visualize the activity of the mesh. It would be beneficial to be able to super quickly design a "all the field ipads can get to the server, but not each other" type network, while at the same time giving pcs more LAN like access, or being able to designate "edge/guests/clients" that can only connect to "servers." The two types of networks shouldnt need to be mutually exclusive. /On the topic of other markets and use cases, and maybe this isnt what Tailscale ever wants to be, I think there is a huge opportunity for a pure software client Wireguard SD-WAN a la Velocloud. If I have two ISPs plugged into my network, let me define BOTH gateways as acceptable places for traffic outflow, and build simultaneous tunnels out both. Maybe load balance traffic between them, watch for packet loss, congestion, jitter, and correct accordingly. That extra redundancy of being able to lose a link and keep the path would be extraordinary.
- apenwarr 7y ago
  (I'm from Tailscale) A few people have reported a failure for the Windows service to start, usually related to registry lockdowns. You can try running "start /w tailscale-ipn.exe /server" in a "admin mode command prompt" window and paste the messages in an email to support@tailscale and we can try to decode them. You can also compile tailscaled from https://github.com/tailscale/tailscale https://github.com/tailscale/tailscale with a Windows target and it'll run on Windows, which makes it easier to explore any bugs. Magic DNS isn't available for testing yet, but coming soon! Our network diagnostic logs are based on https://apenwarr.ca/log/20190216 https://apenwarr.ca/log/20190216 and we do intend to surface those eventually to end users or at least network admins. Just need to work out the right API and security model for that. As for access controls between devices, Tailscale already supports that but our docs are currently too vague. If you're using Tailscale, visit https://login.tailscale.com/admin/acls https://login.tailscale.com/admin/acls to explore. Security policies you edit in there are immediately enforced by all nodes right away, so you can give some users access only to central servers, etc.
  - basch 7y ago
    ACL admin page is perfect! Thanks. MonitorDefaultRoutes: iphlpapi.GetIpInterfaceEntry: Element not found. subprocess exited: exit status 1
    - apenwarr 7y ago
      Do you have wireguard installed on the same machine, by any chance? We currently have a conflicting version of wintun that might create problems.
      - deleted 7y ago
        [deleted]
omgwtfbbqhihihi 7y ago
Why are you saying "was great". Still use it to this day in production. No issues and has been that way for over a decade.
contravariant 7y ago
While we're reminiscing what made Hamachi great; am I missing something or is it not possible to connect different accounts together with the 'Solo' Tier package of Tailscale? Also I couldn't find an 'Exit' button anywhere. Is deinstallation really the only official way to close the application?

basch 7y ago

I thought that article last week was much more interesting. /Techsupport side note. I have a Windows laptop, and for the life of it the client will not connect to the service. How do I troubleshoot this thing? Its almost too simple. Are there logs? https://i.imgur.com/QRLkQl1.png https://i.imgur.com/QRLkQl1.png /And is there any way to get to test the magic dns? Will there be better ways to set up relay nodes, and then SEE the design of the network? Can I set up a relay node on Windows, and only for specific IP addresses instead of entire subnets? /On the topic of "security within the lan is just a nuisance" I do appreciate this being more of a unix philosophy like single tool than kitchen sink. I do think there would be a market for a companion piece of cloud software that acts as a firewall orchestrator between devices, surfaces logs, allows you to block or allow specific connections between specific devices, and to visualize the activity of the mesh. It would be beneficial to be able to super quickly design a "all the field ipads can get to the server, but not each other" type network, while at the same time giving pcs more LAN like access, or being able to designate "edge/guests/clients" that can only connect to "servers." The two types of networks shouldnt need to be mutually exclusive. /On the topic of other markets and use cases, and maybe this isnt what Tailscale ever wants to be, I think there is a huge opportunity for a pure software client Wireguard SD-WAN a la Velocloud. If I have two ISPs plugged into my network, let me define BOTH gateways as acceptable places for traffic outflow, and build simultaneous tunnels out both. Maybe load balance traffic between them, watch for packet loss, congestion, jitter, and correct accordingly. That extra redundancy of being able to lose a link and keep the path would be extraordinary.

apenwarr 7y ago
(I'm from Tailscale) A few people have reported a failure for the Windows service to start, usually related to registry lockdowns. You can try running "start /w tailscale-ipn.exe /server" in a "admin mode command prompt" window and paste the messages in an email to support@tailscale and we can try to decode them. You can also compile tailscaled from https://github.com/tailscale/tailscale https://github.com/tailscale/tailscale with a Windows target and it'll run on Windows, which makes it easier to explore any bugs. Magic DNS isn't available for testing yet, but coming soon! Our network diagnostic logs are based on https://apenwarr.ca/log/20190216 https://apenwarr.ca/log/20190216 and we do intend to surface those eventually to end users or at least network admins. Just need to work out the right API and security model for that. As for access controls between devices, Tailscale already supports that but our docs are currently too vague. If you're using Tailscale, visit https://login.tailscale.com/admin/acls https://login.tailscale.com/admin/acls to explore. Security policies you edit in there are immediately enforced by all nodes right away, so you can give some users access only to central servers, etc.
- basch 7y ago
  ACL admin page is perfect! Thanks. MonitorDefaultRoutes: iphlpapi.GetIpInterfaceEntry: Element not found. subprocess exited: exit status 1
  - apenwarr 7y ago
    Do you have wireguard installed on the same machine, by any chance? We currently have a conflicting version of wintun that might create problems.
    - deleted 7y ago
      [deleted]

omgwtfbbqhihihi 7y ago

Why are you saying "was great". Still use it to this day in production. No issues and has been that way for over a decade.

contravariant 7y ago

While we're reminiscing what made Hamachi great; am I missing something or is it not possible to connect different accounts together with the 'Solo' Tier package of Tailscale? Also I couldn't find an 'Exit' button anywhere. Is deinstallation really the only official way to close the application?