2 ms·
I've been looking into using Tailscale/Headscale but I've been struggling[0] to find in-depth information about what security risk the coordination server poses
by codethief 4y ago
I've been looking into using Tailscale/Headscale but I've been struggling[0] to find in-depth information about what security risk the coordination server poses (should it get hacked). Yes, the node list can be locked but the ACL cannot(?) So if I, say, run the Headscale coordination server on one of the devices that are part of my Tailnet, wouldn't an attacker that controls the coordination server automatically get access to my entire Tailnet, including SSH access to every device? So is the conclusion
- Always lock your node list, whether you use Tailscale or Headscale.
- If you use Headscale, run the coordination server entirely separately from your Tailnet.
?
[0]: https://forum.tailscale.com/t/tailscale-security-what-if-the-coordination-server-goes-rogue/5015 https://forum.tailscale.com/t/tailscale-security-what-if-the... )
- sconi 4y agoCurious why you want to run Headscale? Is it purely to avoid the risks of the coordination server?
- codethief 4y agoYes, and because Tailscale requires me to use a third-party identity provider.
- sconi 4y agoGot it. Makes sense. A big part of why we're building Bowtie. https://bowtie.works https://bowtie.works . We stay out of the critical path.
- andrew-d 4y agoAs of about a month ago, you can self-host your own OIDC identity provider; for example, Ory Hydra is open-source. https://tailscale.com/blog/custom-oidc/ https://tailscale.com/blog/custom-oidc/
- codethief 4y agoThanks, I did read that blog post but adding yet another dependency to my stack just for authentication of a single user (me)? I don't know… Then I might as well just install Headscale.