I think that is the seat based one I see recommended all the time.
I understand that hub and spoke models are inherently questionable security wise and switching to a mesh based approach is probably the answer. But it tends to make for a mess of needing to make sure my various “homelab” servers are aware and so forth.
Might want to check ZeroTier too. They don’t have as much features as Tailscale, but have more relaxed limit. You can use both Tailscale and ZeroTier at the same time without issue.
You can’t take advantage of a lot of Tailscale’s features this way though - for example, the ability to share an individual device with someone else, and the ability to configure ACLs between particular devices (e.g. allow someone access to just a particular port on a server, while allowing yourself full access).
NuXCOM_90Percent@lemmy.zip 1 year ago
I think that is the seat based one I see recommended all the time.
I understand that hub and spoke models are inherently questionable security wise and switching to a mesh based approach is probably the answer. But it tends to make for a mess of needing to make sure my various “homelab” servers are aware and so forth.
redcalcium@lemmy.institute 1 year ago
Might want to check ZeroTier too. They don’t have as much features as Tailscale, but have more relaxed limit. You can use both Tailscale and ZeroTier at the same time without issue.
graveyardchickenhunt@lemmy.world 1 year ago
There’s a “hub” mode where your endpoint inside the network grants access to the whole network like a standard VPN server.
dan@upvote.au 1 year ago
You can’t take advantage of a lot of Tailscale’s features this way though - for example, the ability to share an individual device with someone else, and the ability to configure ACLs between particular devices (e.g. allow someone access to just a particular port on a server, while allowing yourself full access).
NuXCOM_90Percent@lemmy.zip 1 year ago
Oooooooh.
Thanks. Will take a look to try and figure out their terminology for this.
AbidanYre@lemmy.world 1 year ago
I think it’s “exit node”