3 ms·

NAT busting is a plus. Avoid needing DDNS and opening a port. Also easier setup for accessing other stuff on the network via that computer vs up/down rules with

by 0xCMP 5y ago

NAT busting is a plus. Avoid needing DDNS and opening a port. Also easier setup for accessing other stuff on the network via that computer vs up/down rules with a standard wg config. For a small setup thats the big thing, but for anything a little more it does key rotation, handles ips for you, and offers "magic dns" which makes all the devices get a nice DNS address when tailscale is on.

aborsy 5y ago
NAT busting is a minus. If apps can create holes in your network and “bust your NAT,” your network is not well secured; you should disable UPnP and filter egress. Also, you gain simplicity but give up to coordination servers, that can be a privacy and security problem.
- deleted 5y ago
  [deleted]
- rwbhn 5y ago
  Tailscale isn't using UPnP. See https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
  - trulyme 5y ago
    Sidenote: this is a fantastic writeup.
  - istjohn 5y ago
    That was an interesting read. Turns out they do use UPnP, but it's just one of many tools they turn to when other techniques fail.