3 ms·
Tailscale client is open source but server is not. Also, it is not a VPN service solely but it also allows remote access to your machine for admins. I don't lik
by menaerus 3y ago
Tailscale client is open source but server is not. Also, it is not a VPN service solely but it also allows remote access to your machine for admins. I don't like that at all.
- OJFord 3y agoTo be clear you're (as the person setting up Tailscale) the admin in that scenario - and you don't have to allow it. There is a third-party OSS server they let the official client work with. Similar to Bitwarden/Vaultwarden.
- menaerus 3y agoDo you know how to disable the remote access to other people in your organization (by default)? I don't usually do admin stuff nor I unfortunately know much about network setups nor I know about the specifics of tailscale setup.
- OJFord 3y agohttps://tailscale.com/kb/1018/acls/ https://tailscale.com/kb/1018/acls/
- p_l 3y agoIn addition to setting ACLs, you can start the tailscale client in "shields up" mode, where it adds a local rule preventing connections from other nodes to yours. Of course that's not perfect (there are ways to avoid it that if blocked would in turn break legitimate uses by you) but it's there.