31
How often should I rotate my SSH keys?
Learn why rotating your SSH keys is essential for preventing credential theft. Discover best practices for SSH key rotation and how to protect your systems from potential breaches.
Tailscale Blog
The connectivity platform for devs, IT, and security teams. Zero Trust identity-based access that deploys in minutes and scales to every resource. Start free.
- Popular posts
- 59
- Total points
- 21,078
- HN comments
- 8,420
- Rank
- #30 company
Visit tailscale.com → On Hacker News Mar 2020 – Oct 2026
Networking & Internet 34Infrastructure & DevOps 17Security & Privacy 16Software Engineering 12Systems & Performance 10Tools & Productivity 7
32
Tailscale doesn't want your password
Tailscale ditches passwords for passkeys, offering a secure, phishing-resistant, and convenient way to authenticate. Learn how passkeys work, why they’re better than passwords, and how to set them up on your tailnet.
33
Userspace isn't slow, some kernel interfaces are
Discover how recent improvements to wireguard-go boost Tailscale client performance on Linux. Learn about key changes, testing methods, and results showing enhanced throughput and efficiency.
34
Why not “Why not WireGuard?” (2020)
An article by Michael Tremer titled Why not WireGuard is sometimes shared in VPN discussions. Unfortunately that article contains several misconceptions and some out-of-date information that deserves to be addressed.
35
Increasing QUIC and UDP Throughput over Tailscale
Recent optimizations in Tailscale improve UDP throughput, boosting performance for QUIC, HTTP/3, and other UDP-based applications on Linux.
36
Making Tailscale Faster
Tailscale performance updates reduce memory use, increase throughput, and speed startup with multi-queue, writev, and netmap caching.
37
How Tailscale Works
Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.
38
About the Tailscale.com outage on March 7, 2024
On March 7, 2024, tailscale.com was unavailable for approximately 90 minutes due to an expired TLS certificate. We were able to identify and address the issue quickly, and the downtime was mostly limited to our marketing materials and documentation; still, we would like to explain exactly what happened, what the…
39
Tailnet Lock
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
40
A new generation of Tailscale access controls
Grants are Tailscale’s next generation of access controls that combine network and application capabilities into a single syntax.
41
Tailscale has reached general availability
Just over a year ago, we founded Tailscale with a common sense of nostalgia for the “good old days” of LANs. In our collective opinion (then and now) networking and cloud infrastructure has become too complicated. Attempts to increase team connectivity and migrate towards remote work results in a corresponding burden…
42
Tailscale SSH is now Generally Available
Tailscale SSH is now generally available, offering seamless SSH authentication and authorization with SSO, MFA, and ACLs. Enjoy robust security, zero trust remote access, and tools like session recording and VS Code integration.
43
Remembering the LAN (2020)
Learn more about the early days of LAN.
44
Putting Tailscale on the Steam Deck
Unlock Seamless Networking on Steam Deck with Tailscale. Install Now for Instant Access.
45
Surpassing 10Gb/S over Tailscale
Discover how Tailscale achieved over 10Gb/s throughput on Linux using advanced UDP segmentation and checksum optimizations. Explore benchmarks, results, and the innovations powering wireguard go's latest performance leap.
46
Tailscale free for open source projects
Tailscale is now free for open source projects using GitHub organizations. Enjoy up to 25 users, 5 devices per user, and more.
47
Tailscale Services
Tailscale Services is a new way to define available resources on your network and expand the granularity of your access controls to resources that may not have Tailscale installed on them.
48
Role-based access control like it was meant to be
Learn about role-based access control, its use cases and benefits.
49
The Sisyphean Task of DNS Client Config on Linux
The covers a brief history of DNS on Linux systems and what steps Tailscale is taking to ensure it is configured consistently.
50
Session recording for Tailscale SSH in beta
This guide shows you how to set up session recordings for Tailscale SSH. Learn how to record the terminal output whenever someone on your tailnet initiates a Tailscale SSH connection. Use these recordings to detect threats, investigate security incidents, and remain compliant with your network security policies.
51
Tailscale Authentication for Nginx
Use Tailscale's nginx-auth for secure Single Sign-On (SSO) to internal services, reducing the need for internal account systems.
52
Hypergrowth isn’t always easy
Tailscale's CEO talks about outages: what they are, why they happen, and how Tailscale is making them smaller and less frequent.
53
Reducing Tailscale’s binary size on macOS
Tailscale v1.36 for macOS features a significantly reduced binary size (going from 92MB to 56MB). The effort started out with a chance observation about a surprisingly large executable, and ended up involving some creative approaches using dlopen.
54
Tailscale 4via6 – Connect Edge Deployments at Scale
In this post, we’re highlighting 4via6 subnet routing — a powerful way to extend Tailscale’s mesh across entire edge or customer networks. It’s ideal for scenarios where traditional VPNs struggle, like fleets of robots, sensors, or isolated cloud environments.
55
Linker, can you spare a meg? (2021)
Tailscale on iOS runs as a special kind of app, a Network Extension. This lets us run in the background, so we can secure traffic from all of your applications, without them having to change anything. But with this power comes a memory straightjacket. Normal iOS apps can use 5GB or so of memory before iOS kills them…
56
A first look at Aperture by Tailscale (private alpha)
Aperture is an AI gateway that doesn't get in the way of developers, and works with most AI tools.
57
Chat-tails: Throwback terminal chat, built on Tailscale
Brian Scott made an app that's safe, simple, and educational for kids to chat in, using Tailscale's tsnet and connectivity.
58
Tailscale on NixOS: A New Minecraft Server in Ten Minutes
How to provision a new NixOS machine on Digital Ocean with nixos-infect and automatically connect it to your Tailscale network, then use that server to set up a fully private Minecraft world.
59
Tailscale-rs: Official Rust library for embedding Tailscale
We've launched an experimental Rust library for Tailscale via tsnet. Help test tailscale-rs and shape it with your feedback.