Re:Tailscale SSH
by ryanisnan on Thursday June 23, 2022 @11:59AM
(#31850959)
I think I see what you're saying. Usually though, a lot of that stuff is single-setup. E.g., all OS's that we have deployed have the agent installed and running by default.
Additionally, the instance roles are already pre-configured.
There's almost zero overhead in ensuring SSM gets installed on new instances.
One small benefit over TailScale here, I would think, is that I don't have to rely on another tool to gain shell access. Probably a minor win, if you're running a TailScale deployment. In either case, I'd probably want to go with a single tool just to minimize the attack surface area.
Additionally, the instance roles are already pre-configured.
There's almost zero overhead in ensuring SSM gets installed on new instances.
One small benefit over TailScale here, I would think, is that I don't have to rely on another tool to gain shell access. Probably a minor win, if you're running a TailScale deployment. In either case, I'd probably want to go with a single tool just to minimize the attack surface area.