News for hackers. Stuff that matters.

A comment on Tailscale SSH. Parent comment

Re:Tailscale SSH by atonse on Wednesday June 22, 2022 @02:55PM (#31840266)
What would we need to have open in our security groups for this to work?

I think ingress wouldn't be necessary since tailscaled creates a tunnel right?

But how about egress traffic? UDP for WireGuard or something else?

[ Parent | on HN ]
Re:Tailscale SSH by bradfitz on Wednesday June 22, 2022 @03:33PM (#31840758)
Security groups where? On the Tailscale ACL side, you need to allow tcp/22 in.

On your host where you're running Tailscale, usually nothing. You can keep everything locked down for ingress. Outbound UDP only, but usually cloud VMs allow outbound traffic already. (This is covered more in https://tailscale.com/kb/1082/firewall-ports/)

[ Parent | on HN ]
Re:Tailscale SSH by atonse on Wednesday June 22, 2022 @04:14PM (#31841301)
I meant AWS, that page explains it all, thanks!
[ Parent | on HN ]