5 ms·

I can do that without Tailscale though by just using the WireGuard app. What is Tailscale adding to this?

nickysielicki 4y ago
NAT breaking, I can have a wireguard network with Tailscale where every device only has an RFC1918 address and a default route.
- karlshea 4y ago
  Ahhh that is slick
- anderspitman 4y ago
  For more background on just how much Tailscale is doing for you with respect to NAT: https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
- devman0 4y ago
  Is forwarding a single port that difficult in most circumstances? I do realize there are some instances where that is hard like CGNAT, but if I have easy access to wireguard in my network already what does tailscale buy me?
  - donaldihunter 4y ago
    I was running Wireguard exactly as you describe, but I'm now using Tailscale because convenience.
rrix2 4y ago
not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic DNS" service which lets you resolve your Tailscale device names without setting up unbound etc, and which can relay other requests through to your pi-hole or unbound or whatever, which can then listen only on the tailscale IP address, so no need to run an open resolver or deal with source IP filtering. e: also, you can share devices between tailscale users without generating, managing, distributing wireguard secrets. You send your pal/partner/kid a link and they can access your fileserver or raspberry pi webserver or pihole server for themselves wherever they are.
ReverseCold 4y ago
> For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
LoveGracePeace 4y ago
I do the same, for multiple domains I own. Definitely not difficult.

NAT breaking, I can have a wireguard network with Tailscale where every device only has an RFC1918 address and a default route.

karlshea 4y ago
Ahhh that is slick
anderspitman 4y ago
For more background on just how much Tailscale is doing for you with respect to NAT: https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
devman0 4y ago
Is forwarding a single port that difficult in most circumstances? I do realize there are some instances where that is hard like CGNAT, but if I have easy access to wireguard in my network already what does tailscale buy me?
- donaldihunter 4y ago
  I was running Wireguard exactly as you describe, but I'm now using Tailscale because convenience.

rrix2 4y ago

not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic DNS" service which lets you resolve your Tailscale device names without setting up unbound etc, and which can relay other requests through to your pi-hole or unbound or whatever, which can then listen only on the tailscale IP address, so no need to run an open resolver or deal with source IP filtering. e: also, you can share devices between tailscale users without generating, managing, distributing wireguard secrets. You send your pal/partner/kid a link and they can access your fileserver or raspberry pi webserver or pihole server for themselves wherever they are.

ReverseCold 4y ago

> For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.

LoveGracePeace 4y ago

I do the same, for multiple domains I own. Definitely not difficult.