4 ms·

I've been looking for a VPN solution for my 10 person team and haven't found a good one that's lightweight and enables us to have a private WAN. I'm curious at

by yandie 6y ago

I've been looking for a VPN solution for my 10 person team and haven't found a good one that's lightweight and enables us to have a private WAN. I'm curious at the onboarding friction and pricing model. Also I got really confused by "Google Workspaces". Turned out it's just gsuite re branded. So typically Google!

eoinboylan 6y ago
We were in the same boat and set up tailscale, its been great since.
- mrwnmonm 6y ago
  Is tailscale a VPN?
  - kenrose 6y ago
    Yes, it’s wireguard. But they add support for various auth providers (eg, Okta).
  - ignoramous 6y ago
    re-posting my own comment: https://news.ycombinator.com/item?id=22194454 https://news.ycombinator.com/item?id=22194454 My opinion is that, in its current form, tailscale essentially provides a cross-platform super-configurable discovery and key-management layer to a P2P network overlay on top of the public internet, secured by Wireguard. It's like stunnel or ghosttunnel but for L3, and that let's you replace the gargantuan IPSec with something that's way simpler and nimbler like wireguard. As for LAN vs BeyondCorp... tailscale has BeyondCorp influences. It uses federated identity (OpenID for instance) and device credentials (see: wireguard crypto-routing) to let you in on any mesh network that you have access to be [on]. It is not something novel but super complicated to do it as simply as possible. And wireguard is a key enabler for just that. BeyondCorp is obviously much more than just SSO. You might also be interested in: https://www.beyondcorp.com/ https://www.beyondcorp.com/
- tosh 6y ago
  +1 @ tailscale, one of the best products I have come across in the last few years (!)
- basch 6y ago
  The difference between this and Tailscale, is that tailscale is everything open by default, and this would be everything blocked by default. Role and Conditional based access would allow people to touch only what they should have access to, at the network level. Tailscale doesnt mesh Identity/Role/Firewall into a denylist.

by yandie 6y ago

eoinboylan 6y ago

We were in the same boat and set up tailscale, its been great since.

mrwnmonm 6y ago
Is tailscale a VPN?
- kenrose 6y ago
  Yes, it’s wireguard. But they add support for various auth providers (eg, Okta).
- ignoramous 6y ago
  re-posting my own comment: https://news.ycombinator.com/item?id=22194454 https://news.ycombinator.com/item?id=22194454 My opinion is that, in its current form, tailscale essentially provides a cross-platform super-configurable discovery and key-management layer to a P2P network overlay on top of the public internet, secured by Wireguard. It's like stunnel or ghosttunnel but for L3, and that let's you replace the gargantuan IPSec with something that's way simpler and nimbler like wireguard. As for LAN vs BeyondCorp... tailscale has BeyondCorp influences. It uses federated identity (OpenID for instance) and device credentials (see: wireguard crypto-routing) to let you in on any mesh network that you have access to be [on]. It is not something novel but super complicated to do it as simply as possible. And wireguard is a key enabler for just that. BeyondCorp is obviously much more than just SSO. You might also be interested in: https://www.beyondcorp.com/ https://www.beyondcorp.com/
tosh 6y ago
+1 @ tailscale, one of the best products I have come across in the last few years (!)
basch 6y ago
The difference between this and Tailscale, is that tailscale is everything open by default, and this would be everything blocked by default. Role and Conditional based access would allow people to touch only what they should have access to, at the network level. Tailscale doesnt mesh Identity/Role/Firewall into a denylist.