News for hackers. Stuff that matters.
Re:Tailscale SSH by linsomniac on Wednesday June 22, 2022 @07:40PM (#31843329)
Hey bradfitz, guy who previously had 32150 here. :-) This looks insanely cool, a couple questions:

I know it says it's linux-only right now, but is that client side or server only? Can my Windows users TailSSH into linux boxes?

Would be cool if somehow it could wedge into sudo auth so you could login as a a user and sudo without password if allowed by ACLs, especally if I could add "check" to the ssh. agent pam module?

One thing that has prevented me from trying Tailscale, despite the great word on the street, is I can't figure out pricing, despite contacting sales. I'd like to run it on ~120 dev+stg+prod VMs, with 10 people (devs, testers, ops). I'd like every box to talk over tailscale directly, as an overlay network, but servers I hope aren't users, that'd get expensive fast. But I need more devices than 10/user. I presume "custom" would help with that but I got no reply from sales. We are probably too small fry. Now that I'm typing this, I realize I guess we could just buy ~15-20 users despite needing only 10.

I think I've resolved myself to setting up Nebula for the server overlay network, and using Tailscale for physical users, with a traditional firewall bridging them.

Again, Tailscale SSH looks very nice, job well done!

Re:Tailscale SSH by LilBytes on Wednesday June 22, 2022 @09:16PM (#31844033)
Just to add to the above, pricing was a little obsecure for me too though I commited to Tailscale and then worked it out after the fact.

Minor suggestion, for future and new users, is it possible to get a calculator where you could input the number of users you expect, the number of servers you want to include, expected unique ACL's and provide you an ETA of what your license cost would be?

Re:Tailscale SSH by bradfitz on Thursday June 23, 2022 @12:57AM (#31845301)
I've passed that on to coworkers.
Re:Tailscale SSH by bradfitz on Wednesday June 22, 2022 @08:27PM (#31843660)
> I know it says it's linux-only right now, but is that client side or server only? Can my Windows users TailSSH into linux boxes?

Linux-only on the server right. macOS support is kinda there (in git) but not entirely done and not included in the GUI builds. Windows server support is tracked in https://github.com/tailscale/tailscale/issues/4697.

You can use any SSH client from any OS.

> Would be cool if somehow it could wedge into sudo auth so you could login as a a user and sudo without password if allowed by ACLs

Some of the start of that is in https://github.com/tailscale/pam

> One thing that has prevented me from trying Tailscale, despite the great word on the street, is I can't figure out pricing, despite contacting sales. I'd like to run it on ~120 dev+stg+prod VMs, with 10 people (devs, testers, ops). I'd like every box to talk over tailscale directly, as an overlay network, but servers I hope aren't users, that'd get expensive fast. But I need more devices than 10/user. I presume "custom" would help with that but I got no reply from sales. We are probably too small fry. Now that I'm typing this, I realize I guess we could just buy ~15-20 users despite needing only 10.

You only pay for unique humans, not tagged role account devices. I wonder if your email got eaten as spam or something. Email me (username at tailscale) and copy sales@ and I'll make sure somebody replies. But I don't think you need a custom plan.

> I think I've resolved myself to setting up Nebula for the server overlay network, and using Tailscale for physical users, with a traditional firewall bridging them.

Hey, if you've got something that works, stick with it. :)

Re:Tailscale SSH by JonathonW on Wednesday June 22, 2022 @09:40PM (#31844190)
If you only pay for unique humans, why does the pricing page list device count caps (and, on Business plans, the pricing for exceeding those caps)?
Re:Tailscale SSH by dgentry on Thursday June 23, 2022 @12:48AM (#31845246)
Because if you are an IoT service with one human and 100,000 devices, the amount of support you may need is more dependent on the 100,000 than on the 1. Very large numbers of devices per human need somewhat different pricing.
Re:Tailscale SSH by linsomniac on Wednesday June 22, 2022 @09:46PM (#31844228)
Very promising the start of the pam. Good news about the SSH client, I figured that was the case but wanted to ake sure. That would be a huge benefit for my developers who are all on Windows.

Thanks for the info about pricing, I set up the 1 user free account and started that to get some hands on experience, and I'll copy you on pricing if I can't get it figured out. Thanks!

Re:Tailscale SSH by weikju on Wednesday June 22, 2022 @09:01PM (#31843911)
> You can use any SSH client from any OS.

I've tried this earlier and was unsusccessful sshing from my iPad, using Termius and Blink apps. Not sure if there are specific client requirements on the iPad?

Re:Tailscale SSH by bradfitz on Thursday June 23, 2022 @12:56AM (#31845296)
We successfully tested a number of iOS SSH clients. They should all work.

Can you file a bug with details of what you saw? Either https://github.com/tailscale/tailscale/issues/new or email support@ ... whichever you're more comfortable with.

Re:Tailscale SSH by weikju on Thursday June 23, 2022 @07:44AM (#31847704)
ah I think I figured it out!

I had a notification asking me to verify, but because of Focus, that notification didn't show up anywhere that I could see...... So in theory, this should work, will try again.

Re:Tailscale SSH by weikju on Thursday June 23, 2022 @09:30AM (#31848835)
Works fine now
Re:Tailscale SSH by weikju on Thursday June 23, 2022 @05:49AM (#31846889)
sure thing, will do!
Re:Tailscale SSH by Corrado on Thursday June 23, 2022 @02:21AM (#31845748)
Regarding pricing, in my experience the Tailscale crew have been very forgiving when it comes to user/device limits. I'm sure if you have 10 users and 100,000 devices you would get some attention, but keep it reasonable and you should be OK.