Hacker News Reader

Comment by implying | Hacker News Reader

I've deployed it to my larger-than-average home network with great success. A device can roam outside of the network and still access intranet sites and services, and I can remotely access family devices for helpdesk tasks.

My only complaint is that there is no good alternative to authentication other than using Google for small deployments like this. I don't want to pay an auth provider, and none of them offer a simplified plan for 3-4 users.

View on HN

From the site it looks like GitHub works; is that not the case?

I’m definitely not using Google for auth if I can avoid it.

I think that's new-ish, I'd have used it if it were an option when I created my account.

It's "launched this week" new, yeah. We don't have a way to migrate between auth providers yet, but if you feel strongly you could log out your devices and sign back in with github auth. That'd create a completely new tailnet tied to github auth instead of google.

So, Google or Microsoft, then.

> I can remotely access family devices for helpdesk task

Aren't you afraid that a family member compromises "your" network? I would be cautious to let my parents operate within my intranet unchecked.

Does Tailscale have any means to monitor or tie this down without being a drag?

I am still stuck with doing TeamViewer into family devices, because it seems less risky.

I would probably use their isolation/segmentation features for this if I ran something simular. Like you said I wouldn’t trust my own devices let alone family members to have full access to everything. https://tailscale.com/kb/1018/acls/

Do services like airplay and other bonjour based protocols work?

the official wireguard implementations only do unicast afaict.

Reply on news.ycombinator.com