Hi benmccann, I'm Eran, one of the engineering leads on Twingate.

I'm a not Tailscale expert but as far as I understand, the biggest difference between us and Tailscale is that we allow our customers and users to continue using existing private DNS and IP addresses. This means that users can continue accessing internal resources exactly as they did before. From an infrastructure standpoint, as you point out with the Docker container, Twingate is also incredibly easy to deploy. No need to install Twingate on every single destination service, you can just install our connectors on the relevant network segment and we'll take care of routing traffic to the appropriate destination. Making the product as easy to use and deploy is the primary guiding principle for our product, and we're getting great customer feedback around that.

Eran.

What are your thoughts on Gravitational's Teleport?

Haven't tried it myself, but while it seems Gravitational is focused on SSH and Kubernetes use-cases, we've built Twingate to support a wide range of protocols and use-cases across the organization.

We use Kubernetes internally and we use Twingate to securely access internal tools (Like ELK, Grafana, as well as SSH) without having to expose public IPs or worry whether they get hacked or DDoSed. Before Twingate we had to spend a lot of effort to make such tools accessible securely.

The biggest difference is that Tailscale people can get into your machines whenever they want since they generate and distribute the keys and endpoints and you have to trust them more than your mom that they won't hurt you.