3 ms·
Tailscale's data plane is [1] mostly p2p except for some cases where it doesn't work and it goes through an encrypted relay. So your data does not run through T
by cpuguy83 4y ago
Tailscale's data plane is [1] mostly p2p except for some cases where it doesn't work and it goes through an encrypted relay.
So your data does not run through Tailscale servers.
There is an oss [2]coordination server that does let you totally self-host.
[1] https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
[2] https://github.com/juanfont/headscale https://github.com/juanfont/headscale
- ignoramous 4y agoIf the tailscale control-plane is pwnd, outside of compromised ACLs (access controls) and DNS routes, I don't think it affects anything critical on the data-plane like passwords (because SSO) or private-keys since tailscale machine keys and node keys never leave the device: https://tailscale.com/blog/tailscale-key-management/ https://tailscale.com/blog/tailscale-key-management/