hachyderm.io is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide. Note that many non-user account types have restrictions - please see our About page.

Administered by:

Server stats:

9.7K
active users

#tailscaleup

0 posts0 participants0 posts today

Tarun, Tailscale as a networking layer for modern apps

the bar for self-hosting is too high for the general user, and networking has too many problems.

Embed "tsnet" into applications, then "login with Tailscale" as the access control.

Demo: todo application, which embeds the tsnet protocol in the browser, and embedded into an Android app.

tarrooon.com

[ @tailscale ]

Tarun PothulapatiTarun PothulapatiWrites about Infra, Networking and Remote Life.

David Rio DeRios - "Opportunity connectivity and Tailscale"

Universities: lots of teams, hundreds of subnets.

Networking with Tailscale more enjoyable that networking at work. So use a subnet route, split DNS to connect to work.

But: you may need to address corporate exceptions and objections.

Use Tailscale to work around random network misconfigurations. tailscaled
is robust to failures.

Current status: in production for his team.

[ @tailscale ]

Next! @emilyposting with "All the buttons"

Emily did emily.id.au/tailscale - CVE-2022-41924

International CyberSecurity Challenge (Athens). "Attack/defense" capture the flag challenge.

Replicate the challenge with Tailscale, use a Github group for logins, access controls to partition users into groups.

"anonymous tailnets" needed. (ab)use the "subnet router" feature: map the IPv6 tailnet space as a subnet route. Build a tsnet DNS server tool.

[ @tailscale ]

emily.id.auCVE-2022-41924 - RCE in Tailscale, DNS Rebinding, and YouTL;DR Recommendations

Moritz Frenzel - DENOG, Stuttgart-IX.

Build OOB (Out of band) network for resilience.

Old: Layer 3 POP-to-POP going through Cisco 2511 as console server, but: 100W power draw, and redundant OpenVPN not ok.

New hardware: opengear ACM7004-5-L, 8 port console.

New network: whereversim.de, one SIM for 2G-3G-4G+ to pick best carrier. Data pooling to reduce cost.

New VPN: OpenVPN (no), Wireguard (better), Tailscale! Netbox, console.

RFC 6498 conflicts.

[ @tailscale ]

Justin Garrison on "Build your own game streaming service"

Product request: multicast!

Favorite game: "fio" - "figure it out".

Steam Deck: Arch Linux ploy to take over the world.

Old games: EmulatorJS.
New games: Steam Remote Play. (crashes sometimes)
New: NVIDIA GameStream (NVIDIA killed it, but Moonlight + Sunshine open source)

"Games on Whales", containerized. run on GPUs in the cloud.

[ @tailscale ]

Xe Iaso @cadey talking about embedding in your systems.

Success stories:

XeDN - CDN based on Tailscale + fly.io. Caching proxy to Backblaze B2.

@robocadey - bot rendering Stable Diffusion prompts on fly.io + GPU in homelab. "linear algebra or something"

Grafana as part of your tailnet.

tclip: Pastebin clone, self-hosted on tailnet, share selectively via funnel.

golink: URL shortener, runs on fly.io.

libtailscale: wrap Tailscale as C library

[ @tailscale ]

next up, tailscale login.

Use Google, Microsoft, Github, Apple, Okta, Onelogin, custom

new: passkeys, tied to device or keychain, based on in browser

use "second factor" as primary factor.

demo ensues. "Sign in with passkey". Demo 1 fails. Demo 2 succeeds. Demo 3 uses hardware security key, works the first time.

"If you have enough demos, one of them has to work."

Replace passwords!

[ @tailscale ]