4 ms·

Could someone help me out? I understand how Wireguard and Tailscale work. But I don’t understand the various ways they could be used for personal and business u

Could someone help me out? I understand how Wireguard and Tailscale work. But I don’t understand the various ways they could be used for personal and business use cases apart from a workaround for geoblocking. Could people currently using Tailscale chime in?

spyke112 6y ago
I'm using Tailscale for managing an old Mac Mini I have in the office, that does some simple 'cron' tasks. But it's behind NAT, but with Tailscale, I'm able to SSH into the box regardless, which is really nice. I believe it's also possible for instance to have Tailscale running on your servers, and only expose port 22 on the Tailscale interface, which is also quite neat.
popotamonga 6y ago
Instead of VPN'ing to the cloud to access my servers i just installed tailscale on one of the vms in the cloud and exposed all the routes. I work on 5 different pcs, no more up and down vpn. The only thing missing from tailscale for me is being logged into multiple accounts at the same time.
tinco 6y ago
We don't use Tailscale, but we do run a Wireguard server. It allows our remote workers that need local network access. For example we run an internal kubernetes cluster that is not accessible over the internet. And we also have SMB shares that a remote worker might need to look into. Basically the use of a VPN is to add an extra layer of defense. Instead of finding a security hole in our Kubernetes management interface or samba server, an attacker would first have to compromise a workers system, and only then attack our internal servers.
jitix 6y ago
My personal use case for tailscale is to connect my home PC, MacBook Air, Raspberry pi, iPhone, iPad and my VPS into a single network without running a VPN server. The best part is that you don’t have to open any ports on your router and it “just works” out of the box. So even if I’m in a different country I can use the nextcloud app on my phone to connect to my raspberry pi in a secure manner and backup photos, which in turn backs them up to my VPS.
- pdimitar 6y ago
  Do you have a blog post on how did you do it? I am very interested in the same use-case. If you tell me "it's easy, just read the docs" then I am going to cry.
  - jitix 6y ago
    Unfortunately no. I pretty much just installed and configured my gmail account on all the devices. Only tricky part was my VPS because it didn’t have a GUI. I don’t use magicdns yet since it’s in beta.
zimpenfish 6y ago
Not using Tailscale but knocked up a VPN between my various servers to allow e.g. my tiny mail frontend to use the extremely heavy ClamAV on my big mail backend without having to expose it to the wider internet. Same with allowing all the servers access to each others' Redis's for synchronisation of things like rspamd whitelists (easier than setting up Redis replication, for me.)

spyke112 6y ago

I'm using Tailscale for managing an old Mac Mini I have in the office, that does some simple 'cron' tasks. But it's behind NAT, but with Tailscale, I'm able to SSH into the box regardless, which is really nice. I believe it's also possible for instance to have Tailscale running on your servers, and only expose port 22 on the Tailscale interface, which is also quite neat.

popotamonga 6y ago

Instead of VPN'ing to the cloud to access my servers i just installed tailscale on one of the vms in the cloud and exposed all the routes. I work on 5 different pcs, no more up and down vpn. The only thing missing from tailscale for me is being logged into multiple accounts at the same time.

tinco 6y ago

We don't use Tailscale, but we do run a Wireguard server. It allows our remote workers that need local network access. For example we run an internal kubernetes cluster that is not accessible over the internet. And we also have SMB shares that a remote worker might need to look into. Basically the use of a VPN is to add an extra layer of defense. Instead of finding a security hole in our Kubernetes management interface or samba server, an attacker would first have to compromise a workers system, and only then attack our internal servers.

jitix 6y ago

My personal use case for tailscale is to connect my home PC, MacBook Air, Raspberry pi, iPhone, iPad and my VPS into a single network without running a VPN server. The best part is that you don’t have to open any ports on your router and it “just works” out of the box. So even if I’m in a different country I can use the nextcloud app on my phone to connect to my raspberry pi in a secure manner and backup photos, which in turn backs them up to my VPS.

pdimitar 6y ago
Do you have a blog post on how did you do it? I am very interested in the same use-case. If you tell me "it's easy, just read the docs" then I am going to cry.
- jitix 6y ago
  Unfortunately no. I pretty much just installed and configured my gmail account on all the devices. Only tricky part was my VPS because it didn’t have a GUI. I don’t use magicdns yet since it’s in beta.

zimpenfish 6y ago

Not using Tailscale but knocked up a VPN between my various servers to allow e.g. my tiny mail frontend to use the extremely heavy ClamAV on my big mail backend without having to expose it to the wider internet. Same with allowing all the servers access to each others' Redis's for synchronisation of things like rspamd whitelists (easier than setting up Redis replication, for me.)