5 ms·

Yes, this is a real concern. No matter how good tail scale guys are, their control plane services become super attractive target for attackers (solar wind style

Yes, this is a real concern. No matter how good tail scale guys are, their control plane services become super attractive target for attackers (solar wind style attack). Tailscale could provide a "Github Enterprise" style on-prem deployable control plane services running on enterprise controlled domain and with its own BYOK infra. This would majorly address the concern.

bradfitz 5y ago
FWIW, we do sell an on-prem version to certain customers. It's not widely available anybody yet, but it exists. (I work at Tailscale)
- vinay_ys 5y ago
  That's awesome. When it becomes widely available, I would be inclined to talk to my boss about it :-)
- GSGBen 5y ago
  A generally available version of this would be a killer feature.
chipsa 5y ago
Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale https://github.com/juanfont/headscale. Even with a on-prem control plane, you probably want logging setup to detect when unusual nodes get pushed to the accessible list of nodes on your clients.