Hacker News Reader

Check out this comprehensive explanation from TailScale.io, a wireguard VPN startup, on how they use Zanzibar

https://tailscale.com/blog/rbac-like-it-was-meant-to-be/

And see also this talk explaining the Zanzibar paper from Authzed.com a startup that will sell you Zanzibar as a service.

https://authzed.com/blog/what-is-zanzibar/

View on HN

Nice article, thanks for sharing - good to read about some background here. Interesting that Tailscale basically describes Google Zanzibar but does not name it explicitly.

I'm aware of authzed, and have watched their PWL talk. Fwiw, I found their solution to be very compelling, however it just doesn't seem to work well for the problem I'm working on (basically requiring a sidecar service running in a Docker container, as opposed to a SaaS).

Reply on news.ycombinator.com