I think that is the seat based one I see recommended all the time.
I understand that hub and spoke models are inherently questionable security wise and switching to a mesh based approach is probably the answer. But it tends to make for a mess of needing to make sure my various “homelab” servers are aware and so forth.
Might want to check ZeroTier too. They don’t have as much features as Tailscale, but have more relaxed limit. You can use both Tailscale and ZeroTier at the same time without issue.
You can’t take advantage of a lot of Tailscale’s features this way though - for example, the ability to share an individual device with someone else, and the ability to configure ACLs between particular devices (e.g. allow someone access to just a particular port on a server, while allowing yourself full access).
NuXCOM_90Percent@lemmy.zip 11 months ago
I think that is the seat based one I see recommended all the time.
I understand that hub and spoke models are inherently questionable security wise and switching to a mesh based approach is probably the answer. But it tends to make for a mess of needing to make sure my various “homelab” servers are aware and so forth.
redcalcium@lemmy.institute 11 months ago
Might want to check ZeroTier too. They don’t have as much features as Tailscale, but have more relaxed limit. You can use both Tailscale and ZeroTier at the same time without issue.
graveyardchickenhunt@lemmy.world 11 months ago
There’s a “hub” mode where your endpoint inside the network grants access to the whole network like a standard VPN server.
dan@upvote.au 11 months ago
You can’t take advantage of a lot of Tailscale’s features this way though - for example, the ability to share an individual device with someone else, and the ability to configure ACLs between particular devices (e.g. allow someone access to just a particular port on a server, while allowing yourself full access).
NuXCOM_90Percent@lemmy.zip 11 months ago
Oooooooh.
Thanks. Will take a look to try and figure out their terminology for this.
AbidanYre@lemmy.world 11 months ago
I think it’s “exit node”