5 ms·

I've deployed it to my larger-than-average home network with great success. A device can roam outside of the network and still access intranet sites and service

I've deployed it to my larger-than-average home network with great success. A device can roam outside of the network and still access intranet sites and services, and I can remotely access family devices for helpdesk tasks. My only complaint is that there is no good alternative to authentication other than using Google for small deployments like this. I don't want to pay an auth provider, and none of them offer a simplified plan for 3-4 users.

macintux 5y ago
From the site it looks like GitHub works; is that not the case? I’m definitely not using Google for auth if I can avoid it.
- Jtsummers 5y ago
  I think that's new-ish, I'd have used it if it were an option when I created my account.
  - dave_universetf 5y ago
    It's "launched this week" new, yeah. We don't have a way to migrate between auth providers yet, but if you feel strongly you could log out your devices and sign back in with github auth. That'd create a completely new tailnet tied to github auth instead of google.
- atatatat 5y ago
  So, Google or Microsoft, then.
oezi 5y ago
> I can remotely access family devices for helpdesk task Aren't you afraid that a family member compromises "your" network? I would be cautious to let my parents operate within my intranet unchecked. Does Tailscale have any means to monitor or tie this down without being a drag? I am still stuck with doing TeamViewer into family devices, because it seems less risky.
- blowfish721 5y ago
  I would probably use their isolation/segmentation features for this if I ran something simular. Like you said I wouldn’t trust my own devices let alone family members to have full access to everything. https://tailscale.com/kb/1018/acls/ https://tailscale.com/kb/1018/acls/
iso1210 5y ago
Do services like airplay and other bonjour based protocols work?
- mercora 5y ago
  the official wireguard implementations only do unicast afaict.

macintux 5y ago

From the site it looks like GitHub works; is that not the case? I’m definitely not using Google for auth if I can avoid it.

Jtsummers 5y ago
I think that's new-ish, I'd have used it if it were an option when I created my account.
- dave_universetf 5y ago
  It's "launched this week" new, yeah. We don't have a way to migrate between auth providers yet, but if you feel strongly you could log out your devices and sign back in with github auth. That'd create a completely new tailnet tied to github auth instead of google.
atatatat 5y ago
So, Google or Microsoft, then.

oezi 5y ago

> I can remotely access family devices for helpdesk task Aren't you afraid that a family member compromises "your" network? I would be cautious to let my parents operate within my intranet unchecked. Does Tailscale have any means to monitor or tie this down without being a drag? I am still stuck with doing TeamViewer into family devices, because it seems less risky.

blowfish721 5y ago
I would probably use their isolation/segmentation features for this if I ran something simular. Like you said I wouldn’t trust my own devices let alone family members to have full access to everything. https://tailscale.com/kb/1018/acls/ https://tailscale.com/kb/1018/acls/

iso1210 5y ago

Do services like airplay and other bonjour based protocols work?

mercora 5y ago
the official wireguard implementations only do unicast afaict.