No need to port forward, almost 0 config.
Comment on Friendly reminder that Tailscale is VC-funded and driving towards IPO
30p87@feddit.org 2 months ago
What’s the benefit over just WG?
fuckwit_mcbumcrumble@lemmy.dbzer0.com 2 months ago
avidamoeba@lemmy.ca 2 months ago
Easier/zero configuration compared to manual WG setup. Takes care of ports and providing transparent relay when no direct connection works.
lepinkainen@lemmy.world 2 months ago
Your tech illiterate grandma can set it up. It’s that easy.
RxBrad@infosec.pub 2 months ago
Personally, my IP (T-Mobile 5G) has CGNAT and blocks all incoming traffic. I can’t simply Wireguard into my network. Tailscale has been my intermediary to get remote access.
I guess it’s time to figure how how to host an alternative on a VPS (I see Headscale mentioned in these comments).
lka1988@lemmy.dbzer0.com 2 months ago
Tailscale uses WG though, so it’s fundamentally the same thing. Like you said - just do Headscale on a VPS.
30p87@feddit.org 2 months ago
Or Wireguard on a VPS
kratoz29@lemm.ee 2 months ago
WG is worthless in a CGNAT environment… And as we are in 2025 and time doesn’t stop it will be irrelevant for everyone someday, unless they fully support IPv6 (which I don’t know if they do, if you can use WG in a CGNATED network with IPv6 I’d like to know though, I am very rusty setting it up, but it might worth checking it out).
melmi@lemmy.blahaj.zone 2 months ago
CGNAT is for IPv4, the IPv6 network is separate. But if you have IPv6 connectivity on both ends setting up WG is the same as with IPv4.
kratoz29@lemm.ee 2 months ago
I usually have IPv6 access in my home, on the outside it varies from the ISPs :/
Starfighter@discuss.tchncs.de 2 months ago
You dont need to manually handle the WG config files. This isn’t really an issue when it’s just and your two devices, but once you start supporting more people like non-technical family members, this gets really annoying really quickly.
Tailscale (and headscale) just require you to log in which even those family members can manage and do the rest for you. They also support SSO in which case you wouldn’t even have to create new accounts.