Ease of installation, SSO, peer to peer tunnels (whereas in VPN access server, the server sees inside of the tunnel), no open ports, DNS, private dns server, sw

Ease of installation, SSO, peer to peer tunnels (whereas in VPN access server, the server sees inside of the tunnel), no open ports, DNS, private dns server, switching easily between different exit nodes (or no exit node), subnet router, ACL (like cloud firewall), sending files from one device to another, TLS certificate for each device, fall back to TCP/relays when udp is not available. Tailscale is very good if you have to manage many users, and if you want to share nodes with others. Cool tech! If you install Tailscale, then you don’t need to think of connectivity for other applications: media servers, file sync, RDP, etc. Otherwise, for each of them, you have to think of networking all over (port forwarding, relays, UPnP, …). Cons: You have to install an agent running as root on all devices, trust the coordination server to some extent, much bigger attack surface!