News for hackers. Stuff that matters.
Re:Tailscale Funnel by bradfitz on Thursday November 17, 2022 @09:03PM (#33648876)
Our Funnel ingress servers won't proxy any TCP connection that doesn't have a *.ts.net SNI name currently.

But BYODomain is something that'd be fun to add.

Re:Tailscale Funnel by pbronez on Thursday November 17, 2022 @10:34PM (#33649779)
BYODomain would be great. This would give me a secure & reliable to host public services out of my homelab.
Re:Tailscale Funnel by anderspitman on Thursday November 17, 2022 @10:46PM (#33649911)
It would be great if Tailscale adds this, but there are lots of services that provide this functionality if you need it today, including Cloudflare Tunnel.
Re:Tailscale Funnel by xyzzy_plugh on Friday November 18, 2022 @12:49AM (#33650892)
Cloudflare's CNAME flattening with proxy enabled would do the trick. The ingress sees a request to the CNAME target so SNI works as usual.