4 ms·
I love Tailscale and it's true that I am not suffering from stability problems with its database choices. But, I do have challenges working with their ACL stru
by jbmsf 5y ago
I love Tailscale and it's true that I am not suffering from stability problems with its database choices.
But, I do have challenges working with their ACL structure -- which is backed by their database -- and specifically would love to be able to update users/groups separately from tag groups and both of those separately from ACL rules and I can't help but wonder if the fact that this feature doesn't exist relates to the fact that the database doesn't normalize these concepts into separate "tables" separated by "foreign keys".
- bradfitz 5y agoTailscale engineer here. Unrelated. We just haven't worked on it much. A bunch of other stuff has been a higher priority. But better ACL management will happen.
- structural 5y agoThis is great to hear. We've been happy users for a couple of years, and the device tagging support has come a long way (and is a big enabler for sensible ACLs), but trying to use Tailscale's ACLs in general has been our biggest pain point with the product.