not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic D

not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic DNS" service which lets you resolve your Tailscale device names without setting up unbound etc, and which can relay other requests through to your pi-hole or unbound or whatever, which can then listen only on the tailscale IP address, so no need to run an open resolver or deal with source IP filtering. e: also, you can share devices between tailscale users without generating, managing, distributing wireguard secrets. You send your pal/partner/kid a link and they can access your fileserver or raspberry pi webserver or pihole server for themselves wherever they are.