3 ms·
Can someone shed some light on the full use-case of Tailscale/Zerotier/Nebula please? I may be not getting something fully. The question is this. Say, I use on
by jgilias 5y ago
Can someone shed some light on the full use-case of Tailscale/Zerotier/Nebula please? I may be not getting something fully.
The question is this. Say, I use one of the above to form a private mesh network for the nodes that an organization needs to have access to. So far so good. But on the machine side I would still want to have key (ideally certificate) based authentication, and some user management, such that access can be revoked. Is this an anti-pattern? Or do people use something like Go Teleport in combination with a zero trust mesh network?
- Anunayj 5y agoOh yes, Tailscale/Zerotier actually has a centralized control plane such that access can be revoked centrally and users be managed centrally too. and Tailscale has very nice blog posts explaining their infrastructure [1] [1] https://tailscale.com/blog/how-tailscale-works/ https://tailscale.com/blog/how-tailscale-works/
- jgilias 5y agoThanks! I've read (again) the article, but it doesn't really answer my question. Here's a concrete example: An organization uses Tailscale. There's 'server102' that is connected to the Tailscale network that all users of the `devops` team have access to. A new employee, Anne, joins the company. Sysadmins set up her SSO account, as well as makes her part of `devops` on Tailscale. Anne gets her company computer, sets it up, connects to Tailscale, fires up her shell, types in `ssh anne@server102`, presses Enter. What happens?