About the Tailscale.com outage on March 7, 2024

Re:About the Tailscale.com outage on March 7, 2024 by amluto on Saturday March 30, 2024 @04:17PM (#39878220)

A non-TLS-terminating proxy is a great thing to host on a service like Hetzner. If you set up CAA correctly, then you are trusting the provider for latency and availability only, and you might as well avoid hilariously expensive services like CloudFront or an EC2-based proxy.

Hmm, it looks like Tailscale is using NetActuate for pkgs.tailscale.com. I bet NetActuate could help serve up a non-terminating proxy with plenty of PoPs at a reasonable price. Their website doesn’t give pricing, but it sounds like the kind of company that doesn’t mark up egress 50x.

[ Parent | on HN ]

Re:About the Tailscale.com outage on March 7, 2024 by SahAssar on Saturday March 30, 2024 @07:30PM (#39879675)

> A non-TLS-terminating proxy is a great thing to host on a service like Hetzner. If you set up CAA correctly, then you are trusting the provider for latency and availability only, and you might as well avoid hilariously expensive services like CloudFront or an EC2-based proxy.

Are you really getting any latency or availability improvements in that case? What does a non-TLS-terminating proxy give you?

[ Parent | on HN ]

Re:About the Tailscale.com outage on March 7, 2024 by amluto on Saturday March 30, 2024 @08:32PM (#39880140)

Functionality. The reason for having a proxy at all seems to be that Vercel doesn’t support IPv4.

[ Parent | on HN ]