Tailscale

[Dave Typinski]

Anyone here have any experience with tailscale and/or thoughts about it? I'm
considering it's use in lieu of RDP on my companies' machines and on my personal
machines.

https://www.youtube.com/watch?v=VZZW4A1wwTg

https://tailscale.com/pricing

--
Dave

[Dave Typinski]

Sorry, meant to say I'm considering using tailscale in lieu of a "normal" VPN.
RDP would still be used, but over the tailscale VPN mesh network -- instead of
over the public internet via port forwarding on the routers. It's the port
forwarding I want to do away with and then there's the trust issue with "normal"
VPN services.
--
Dave

[Mike Schietinger]

I think the most relevant factors are what are you trying to accomplish at the end of the day, and who will keep everything running. 

Tailscale is two systems together:Wire guard VPN, and a software port forward/acl manager with a good GUI. 

Wire guard is an excellent VPN solution for giving device based access to your network. It's usually implemented on the edge device, but dedicated VPN management boxes have been a thing at various times.

The port forward manager is nice, but you'll already be setting firewall rules in your router and devices, adding a third device adds a point of failure and complexity.

I generally prefer VPN be implemented on the router so that you aren't allowing any unauthorized traffic past the network edge. In the event that you are missing security patches on the tailscale device you could be vulnerable to an attack that grants the actor remote access to a staging point inside your network.

If you are looking to diy an old computer into your solution I recommend PFSense. It's free and includes wireguard VPN. It's a bit more technical to setup but is a full nat router. We use them heavily to virtualize VPN connection points for data center tenants, so it stands up to the security check. If you don't want to diy the box, Netgate sells mini router boxes with PFSense presetup for a few hundred bucks on Amazon 

Mike Schietinger 

--
You received this message because you are subscribed to the Google Groups "howthingswork" group.
To unsubscribe from this group and stop receiving emails from it, send an email to howthingswor...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/howthingswork/6A1CF099.1030607%40typnet.net.

[Dave Typinski]

Thanks Mike! I have more research to do, apparently. I was (am) questioning
the security of the VPN built into the router (Ubiquiti Dream Router 7), but
perhaps that's not worth worrying about since it too supports the wireguard
protocol. And since all I need is RDP, I'm not sure that implementing tailscale
would gain me anything compared to the router's native capabilities. Either way
I'd still have to use RDP or rustdesk or similar.
--
Dave

> <mailto:howthingswork%2Bunsu...@googlegroups.com>.

> To view this discussion visit
> https://groups.google.com/d/msgid/howthingswork/6A1CF099.1030607%40typnet.net.
>

> --
> You received this message because you are subscribed to the Google Groups
> "howthingswork" group.
> To unsubscribe from this group and stop receiving emails from it, send an email
> to howthingswor...@googlegroups.com

> <mailto:howthingswor...@googlegroups.com>.

> To view this discussion visit

> https://groups.google.com/d/msgid/howthingswork/CAFO25dUKzvkx_zmByWuuARUeQ2hfqNNYTOKOJ3Orx_w_ToQA3w%40mail.gmail.com
> <https://groups.google.com/d/msgid/howthingswork/CAFO25dUKzvkx_zmByWuuARUeQ2hfqNNYTOKOJ3Orx_w_ToQA3w%40mail.gmail.com?utm_medium=email&utm_source=footer>.

[Mike Schietinger]

Yeah I'd trust ubiquity security team over tailscale. Ubiquity is the leader in smb routers at this point has way more incentive to be as secure as possible.

To unsubscribe from this group and stop receiving emails from it, send an email to howthingswor...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/howthingswork/6A1E4AAE.7040505%40typnet.net.