3 ms·
If you don't open ports, how can it reach your internal services to allow you access to them?
by lucb1e 11mo ago
If you don't open ports, how can it reach your internal services to allow you access to them?
- UltraSane 11mo agoby using a wireguard tunnel and NAT traversal https://tailscale.com/blog/how-nat-traversal-works https://tailscale.com/blog/how-nat-traversal-works
- lucb1e 11mo agoAh, by using their servers: > How do we break the deadlock? That’s where STUN comes in. [...] In Tailscale, our coordination server and fleet of DERP (Detour Encrypted Routing Protocol) servers act as our side channel
- UltraSane 11mo agoYes, NAT traversal is used widely. It is only needed at the start of the connection to get both firewalls to open ports. The encrypted wireguard tunnel is point to point