Does Tailscale have restrictions on how users use the tunnel? (Like Cloudflare Tunnel) reddit / selfhosted ---------------------------------------------------------------------- Significant-Neat7754 · 2023-11-10 02:12 Cloudflare Tunnel does not allow users to connect to services like Plex/Jellyfin (according to their TOS). Is there any similar restriction with Tailscale? ---------------------------------------------------------------------- Fluffer_Wuffer · 2023-11-10 02:32 Well I'm sure they'd prefer people not abuse it, but not that i'm aware of, and have never seen any mention of people being banned.. But the difference is, traffic is nearly always peer to peer with Tailscale, so the cost to them is 0, and they can't see what the packets contain, but with Cloudflare, it always traverses their network and the associated cost. ---------------------------------------------------------------------- stupv · 2023-11-10 03:45 Cloudflare tunnels are centralised, so they have some stake in the type of traffic going through. Tailscale is peer to peer, and they have no awareness of what is passing through. Even if its in their TOS, which i doubt, theres no meaningful way to discover or enforce ---------------------------------------------------------------------- autogyrophilia · 2023-11-10 05:40 Pretty sure that was removed years ago. ---------------------------------------------------------------------- certuna · 2023-11-10 06:31 Tailscale is a peer to peer VPN, they cannot see what’s going through between peers. ---------------------------------------------------------------------- VoyTechnology · 2023-11-10 09:26 If you are using Tailscale Funnel I believe you are not supposed to use it for that. ---------------------------------------------------------------------- hucknz · 2023-11-10 09:40 Funnily enough I was reading the docs today. They mention there is a [bandwidth limit](https://tailscale.com/kb/1223/funnel/#limitations), but not what that is, I assume because they’re receiving that traffic and forwarding it to your network so they bear the costs. Otherwise their terms don’t reference anything to do with content. ---------------------------------------------------------------------- CAP_NET_ADMIN · 2023-11-10 10:01 It's only if you use Funnel, if you use normal peer-to-peer mode, then there are no bandwidth limits. ---------------------------------------------------------------------- Lumsti · 2023-11-10 10:39 When a packet leaves the tunnel it gets decrypted by tailscale. The software sees the unencrypted traffic for a brief moment and could sent statistics to tailscale about used ports, protocols and such. This goes for every closed source software. Even your end-to-end encrypted whatsapp massages need to be decrypted from the client software at some point to show you (the user) the message in cleartext. Technically this cleartext info can than be copied by whatsapp and sent elsewhere. Thats why only open source software can truly be trusted with encryption. ---------------------------------------------------------------------- CabbageCZ · 2023-11-10 11:27 Isn't Tailscale Funnel similar to cloudflare tunnels in that traffic has to go through tailscale's servers? Depends if OP is asking about regular ol' Tailscale or Tailscale Funnel specifically. ---------------------------------------------------------------------- maxmayer93 · 2023-11-10 11:37 I mean, if you don't stream videos/moonlight hosts I don't see them interfering ---------------------------------------------------------------------- Significant-Neat7754 · 2023-11-10 12:17 I'm not talking about Funnel. Just the regular Tunnel. ---------------------------------------------------------------------- CabbageCZ · 2023-11-10 12:21 Oh. In that case yeah I don't think there's any restrictions, basically all of the traffic is peer to peer. ---------------------------------------------------------------------- Druxtar · 2023-11-10 12:28 true, a lot of people don't understand that TLS is transport layer security. Right after or right before transporting the data is unencrypted for the used software. ---------------------------------------------------------------------- Emiroda · 2023-11-10 13:44 When OP is comparing Tailscale to Cloudflare Tunnels, one can only imagine that OP is talking about Tailscale Funnel. ---------------------------------------------------------------------- CAP_NET_ADMIN · 2023-11-10 13:50 Yeah, imho if you're only using it to access some private apps, regular Tailscale is enough - no need to funnel public traffic in that case. ---------------------------------------------------------------------- Emiroda · 2023-11-10 13:58 The only data exchange happening to Tailscale's severs (when not using Funnel) is the heartbeat. All data between nodes is peer-to-peer. ---------------------------------------------------------------------- GolemancerVekk · 2023-11-10 16:25 > This goes for every closed source software. Tailscale client code is open source. ---------------------------------------------------------------------- Lumsti · 2023-11-10 16:51 Ah didn‘t know that, I stand corrected ---------------------------------------------------------------------- mrashley · 2023-11-10 17:18 This is a classy acknowledgement that I wish I saw more of. 🎩 ---------------------------------------------------------------------- ervwalter · 2023-11-10 18:22 Usually tailscale traffic is peer to peer, but not always. Sometimes two machines can't talk directly to each other. In that case Tailscale hosts DERP servers that relay the traffic. Those incur costs for Tailscale, but they say in their "[why is this free](https://tailscale.com/blog/free-plan/)" blog post that instead of putting artificial limits, those DERP server use things like bandwidth limiting and queueing to slow down people who are "using too much bandwidth" ---------------------------------------------------------------------- ervwalter · 2023-11-10 18:23 Some connections are relayed through DERP servers. Most don't but it's not true that "all" data between nodes is peer-to-peer. ---------------------------------------------------------------------- hucknz · 2023-11-10 23:13 Yeah, I get that. I figured they were talking about Funnel specifically since that would be the comparable product to Tunnel.