I cut my cloud bill by 95% using Traefik, Tailscale, and K3s

It's an alright video, kind of feels like they made the video just to spam the referral for digital ocean.

The TL;DR use tailscale as a sidecar on Traefik.

They followed this article: https://tailscale.com/blog/kubecon-21/

Genuinely interesting. I've never even looked at the votes on Youtube videos and I didn't think most people really thought much of them either (the recent controversy notwithstanding).

Nor have I ever downvoted or upvoted one.

I've always found crowdsourced up/down votes to be largely useless. I'm aware of the irony in stating that in a post on the "orange site".

Meh, overly complicated solution to a problem that could have been solved with a few lines of iptable config.

Hi. I'm the video creator. I didn't even know this was submitted to HN until I saw the view count today. I definitely didn't do it to spam the referral to DO - in the entire time that I've had that referral link, I've made one $25 credit off of it.

I did it because it was the only way I was able to move all of those services off of the DO cluster and into my house, over NAT, without a static IP. Doing so saved me about $3600/year. I think it's an awesome solution and that Tailscale is an awesome product. I've expanded this with other sidecars that enable me to do things like run a local Node Red environment to control and monitor the solar installation on my old property back in Chile while I wait for someone to buy it.

There are a lot of Kubernetes multi-cluster solutions, but they have preconceived notions of how your cluster should look in order for them to work. Dynamic IPs on the edge break everything except for Tailscale. I spent a month going through all of the solutions before settling on this one, and I was positively thrilled to put all this together and share it with the world. I'm thankful for everyone who watched it, and for those who have implemented it.

I worked for Rancher Labs for four years in various roles, including the Director of Community and Evangelism. I currently work as the Head of Developer Relations at Traefik Labs. I've been building internet infrastructure since 1996, with 14 years spent running an MSP that built and managed datacenters for US media companies like Sesame Workshop, Scholastic, BET, Right Media (prior to the Yahoo acquisition), and properties of MTV/Viacom.

Part two of the video is here: https://youtu.be/OIwxIdyZg7A. It's also linked in the end screen, and I've added it to the video description. Thanks for sharing that you were unable to find it.

I'm curious - if you didn't like this video, which I intended to be a tutorial in how to solve a complex issue in under thirty minutes, what would you have liked to see instead?

>I really don't like that videos are becoming standard way for tutorials. Personally, I much prefer text articles for IT topics, since it's easier to follow them, and skim through if needed.

Me too!

BUT, I love how we have ebbs and flows w.r.t to "one approach" vs "the other approach". That's what keep the market stimulating.

Since 2000-2015, books are kings

From 2015-onwards, videos are getting more and more prominent

I love that there are folks who still prefer text and I foresee content creator that focuses on high-quality text content can charge more until everybody moves to text/book again :).

... and then we repeat the cycle.

This is great for the content creator :)

It's impossible to traverse NAT without having ports forwarded between the public and private IPs. My comment meant that I didn't want to manually configure port forwarding on my edge router back to hosts and then have to maintain that configuration and update it as things change, especially for a solution like a VPN that's going to have a lot of dynamism to the ports where it's running.

I wanted a robust solution with minimal manual intervention, and with Tailscale, Traefik and Flux, that's what I was able to build.

Traefik has over 2 billion downloads from Docker Hub. Lots of people are using it. I left Rancher/SUSE to work for Traefik Labs because it's a product that stands out in a space where it's pretty hard to differentiate.