[HN Gopher] The subtle magic of tsnet
___________________________________________________________________
The subtle magic of tsnet
Author : xena
Score : 33 points
Date : 2023-07-11 12:01 UTC (2 days ago)
(HTM) web link (tailscale.dev)
(TXT) w3m dump (tailscale.dev)
| tentacleuno wrote:
| I love Tailscale posts, but I don't feel like the slide -> blog
| conversion has gone very well here. It reads more like a Twitter
| thread. In one of the slides, they even admit the imagery is
| sloppy, but do nothing to supplement it with a better one.
| globalreset wrote:
| Love both Tailscale and Xe's writing as well, and indeed, all
| these (rather irrelevant) images are just breaking the flow of
| reading/skimming the content. I guess I'll just watch the video
| instead.
| Modified3019 wrote:
| Yeah, they definitely need to spend 5 minutes to remove the
| spurious slides that don't actually provide any information.
| xena wrote:
| This took me more than 5 minutes, but do you mean something
| like this? https://tailscale-dev-git-xe-no-fun-allowed-
| tailscale.vercel...
| dang wrote:
| Thanks! I've pinned that link to the top of the thread
| along with a request to stop being distracted by formatting
| now.
| plibither8 wrote:
| Yes! This is way more readable, thank you.
| xena wrote:
| The fix is rolling out shortly.
| jrm4 wrote:
| Could be I'm old, but I read the beginning, recognized the
| problem like YES that is hard... and then ended up reading about
| solutions that just made it all even more complicated?
| dang wrote:
| OP kindly made a streamlined version of same post for those who
| prefer: https://tailscale-dev-git-xe-no-fun-allowed-
| tailscale.vercel....
|
| All: please focus on the content now. (See
| https://news.ycombinator.com/newsguidelines.html re " _tangential
| annoyances--e.g. article or website formats [etc.]._ ")
|
| Edit: looks like that's now the version at the official URL so I
| will cause this comment to plummet to the depths.
| flumpcakes wrote:
| An interesting article overall, but I think authenticating a user
| based on their IP address is probably the worst security advice
| I've seen. It's probably ripe for attack with ARP poisoning, IP
| spoofing, etc.
| bradfitz wrote:
| (I work at Tailscale)
|
| It only authenticates it _after_ all the WireGuard bits. So
| it's not really auth by IP address, but auth by wireguard key
| identity, from which we know your identity. There's no IP
| spoofing possible. And ARP isn't even in the picture for an L3
| protocol.
| [deleted]
| vorpalhex wrote:
| I see a lot of mention of folks of using tailscale for their
| friend group to access stuff.. but the free plan seems to max out
| at 3 users, with an exception for foss projects.
|
| What am I missing? How do I use tailscale for my 10ish friends
| and me to play minecraft without paying hundreds a year?
| kevinkeller wrote:
| Have each person create their own account, and share nodes:
| https://tailscale.com/kb/1084/sharing/
| xena wrote:
| Tailscalar/talk author here. Set up a GitHub org. That has a 25
| user limit for free. That's what my husband and I use (our
| tailnet predates the new free plan details here:
| https://tailscale.com/blog/pricing-v3/).
___________________________________________________________________
(page generated 2023-07-13 23:01 UTC)