4 ms·
Running a Tailscale POC now. Paranoid firewalls blocking NAT traversal are a pain. I am running a private DERP relay to get around public relay congestion. I a
by jakedata 5y ago
Running a Tailscale POC now.
Paranoid firewalls blocking NAT traversal are a pain. I am running a private DERP relay to get around public relay congestion. I also have a subnet relay running - I am watching which solution will be long-term more performant and reliable.
Their ACLs definitely take some getting used to but I think I have things about where I want them.
Surprising issue - conflicting address ranges between home users and corporate network prevent subnet relays from working seamlessly.
Centralized logging would be a cash-worthy feature.
Adoption by the team is a bit slow, most people are still using SSH tunnels despite the clumsy nature.
- chipsa 5y agoThey log to themselves centrally, and they log to the standard locations on the clients, so you can pull the logs in from there using your standard centralized logging setup. Conflicting address ranges for subnets isn't especially surprising to me. Making sure your corpnet isn't on 192.168/16 probably is the most helpful thing to do there.