3 ms·
What would we need to have open in our security groups for this to work? I think ingress wouldn't be necessary since tailscaled creates a tunnel right? But ho
by atonse 4y ago
What would we need to have open in our security groups for this to work?
I think ingress wouldn't be necessary since tailscaled creates a tunnel right?
But how about egress traffic? UDP for WireGuard or something else?
- bradfitz 4y agoSecurity groups where? On the Tailscale ACL side, you need to allow tcp/22 in. On your host where you're running Tailscale, usually nothing. You can keep everything locked down for ingress. Outbound UDP only, but usually cloud VMs allow outbound traffic already. (This is covered more in https://tailscale.com/kb/1082/firewall-ports/ https://tailscale.com/kb/1082/firewall-ports/)
- atonse 4y agoI meant AWS, that page explains it all, thanks!