3 ms·

With tailscale on your server and endpoints you can access the server from anywhere without even having to open any ports. It is like magic.

• lucb1e 11mo ago
  If you don't open ports, how can it reach your internal services to allow you access to them?
  • UltraSane 11mo ago
    by using a wireguard tunnel and NAT traversal https://tailscale.com/blog/how-nat-traversal-works https://tailscale.com/blog/how-nat-traversal-works
    • lucb1e 11mo ago
      Ah, by using their servers: > How do we break the deadlock? That’s where STUN comes in. [...] In Tailscale, our coordination server and fleet of DERP (Detour Encrypted Routing Protocol) servers act as our side channel
      • UltraSane 11mo ago
        Yes, NAT traversal is used widely. It is only needed at the start of the connection to get both firewalls to open ports. The encrypted wireguard tunnel is point to point
        • lucb1e 11mo ago
          What I find crazy is that people describe "not self hosting" as a "like magic" solution to self hosting
          • UltraSane 11mo ago
            You can run your own DERP server if you really want to docker run -d --name derper -p 443:443 -p 3478:3478/udp \ ghcr.io/tailscale/derper:latest