Comment on Self-hosting in 2025 isn't about privacy anymore - it's about building resistance infrastructure
irmadlad@lemmy.world 1 month agoWhile true, only partially.
- United States Ashburn, Chicago, Dallas, Denver, Honolulu, Los Angeles, Miami, New York City, San Francisco, Seattle
- Australia Sydney
- Brazil São Paulo
- Canada Toronto
- Finland Helsinki
- France Paris
- Germany Frankfurt, Nuremberg
- India Bangalore
- Japan Tokyo
- South Africa Johannesburg
- United Kingdom London
- Others Various locations in other regions, including Asia and Europe
BCsven@lemmy.ca 1 month ago
Are these relays? I think their announcement was data server, which means USA govt would have all your tailscale keys if they decide to keep going on the fascism.
irmadlad@lemmy.world 1 month ago
Here is the way I understand Tailscale to work. Feel free to correct any misinformation.
Tailscale doesn’t operate ‘data‑center’ servers that store or forward your traffic.
Control plane: Holds device metadata, public keys, ACL policies, and the DERP map. It is a small, highly available service that all clients contact only when they start up or need a policy update. Tailscale runs this service on a handful of cloud providers (primarily AWS and GCP) in the United States. TThe service carries no user data. Only control information.
Data plane: Carries the actual packets between your devices. After the control plane tells two devices how to reach each other, they open a direct WireGuard tunnel that is end to end encrypted. There are no dedicated ‘data servers’. Traffic travels directly between the peers. If a direct path can’t be established because of strict NATs or firewalls, the connection falls back to a DERP relay. The DERP relays are the only servers that ever carry user payload.
However, to keep with your fear of the US having all your Tailscale keys, what makes you think that Australia, Brazil, Canada, Finland, France, Germany, India, Japan, or the UK wouldn’t/couldn’t do the same? I’m no shill for Tailscale. AFAIC, you can either use the service or not. Your choice, no skin off my back. I’m just curious how far the paranoia rabbit hole goes.
BCsven@lemmy.ca 1 month ago
Based on current USA actions, I have more faith in my own country and allies. The account info and control plane is what I mean, it could get compromised being under US control where they don’t seem to Ned warrants anymore
irmadlad@lemmy.world 1 month ago
Understandable. I don’t know what your threat model is. I don’t trust any of them except to do what is in their best interest, globally. However, there is nothing stopping Australia, Brazil, Canada, Finland, France, Germany, India, Japan, UK, or even your country, from doing the very same thing. Governments make laws for citizens, not themselves. Everything can be compromised at any time a government decides to. That is the reality of it all. If I am going to hide from a government in 2026, then game over, and there’s not a damn thing I could/can do about it. I’ll just unplug, and live out the rest of my life in the seclusion of my farm/compound.