6 ms·
> If you aren't comfortable with trusting them with control over your network Wrt the possibility of Tailscale being compromised, there's the in-beta tailnet l
by dankebitte 1y ago
> If you aren't comfortable with trusting them with control over your network
Wrt the possibility of Tailscale being compromised, there's the in-beta tailnet lock feature:
> Tailnet lock lets you verify that no node is added to your tailnet without being signed by trusted nodes in your tailnet. When tailnet lock is enabled, even if Tailscale infrastructure is malicious or hacked, attackers can't send or receive traffic in your tailnet. [1]
[1] https://tailscale.com/kb/1226/tailnet-lock https://tailscale.com/kb/1226/tailnet-lock
- ra 1y agoThe pricing page suggests this is only for the "enterprise" plan.
- dankebitte 1y agoNot sure which page you're referencing, but the linked page states it's available for Personal (free) as well: > Tailnet lock is available for the Personal, Personal Plus, and Enterprise plans.
- supermatt 1y agoIt is definitely on personal as I use it myself.
- cypherpunks01 1y agoThanks for the tip! I've had the Device approval setting on, and wished there were more robust lock features, but not enough to want to run my own coordinator. So Tailnet lock seems like a good security upgrade.