Re:How our free plan stays free
by vinay_ys on Wednesday March 16, 2022 @02:06PM
(#30702031)
Yes, this is a real concern. No matter how good tail scale guys are, their control plane services become super attractive target for attackers (solar wind style attack). Tailscale could provide a "Github Enterprise" style on-prem deployable control plane services running on enterprise controlled domain and with its own BYOK infra. This would majorly address the concern.
[ Parent
| on HN ]
FWIW, we do sell an on-prem version to certain customers. It's not widely available anybody yet, but it exists.
(I work at Tailscale)
That's awesome. When it becomes widely available, I would be inclined to talk to my boss about it :-)
A generally available version of this would be a killer feature.
Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale.
Even with a on-prem control plane, you probably want logging setup to detect when unusual nodes get pushed to the accessible list of nodes on your clients.