5 ms·
But HOW can this work? It MUST have config level access to each machine, that's the only way I can see this working. I guess I just have to try it to see.
by fullstackchris 4y ago
But HOW can this work? It MUST have config level access to each machine, that's the only way I can see this working. I guess I just have to try it to see.
- ramary 4y agoIt's a really neat piece of software - you're right that it does have the ability to configure your system, routing tables in particular. The Tailscale agent (thing that runs on your machine) changes the system routing table (at least on Linux) and uses policy-based routing (marks packets destined for the "Tailnet" specially) to build the overlay network. Since everything is done at L3 in the OSI model, iOS and Android clients (in the form of an app) are also available without needing root (jailbreaking). There are some things it can't do owing to the whole thing operating at L3, but it's a really awesome implementation nevertheless. And just to add, they aren't the first to build a product like this, but they do it incredibly well and the time to value for most users is extremely short, made even better by the fact that the expectation is that the time to value will be long(ish) and painful.