February 2022 Summaries

Tailscale introduces the concept of autoApprovers for routes and exit nodes, allowing users to self-approve network configurations specified in an Access Control List (ACL) file. This feature simplifies the setup process for subnet routers and exit nodes by enabling users to manage multiple devices with a single command without needing post-setup admin approval. Subnet routers facilitate the connection of existing private networks to a Tailscale tailnet, offering an efficient method to deploy Tailscale incrementally without installing it on every device. However, while subnet routers ease deployment, they rely on trusted networks since they do not provide end-to-end encryption like direct Tailscale installations, which are recommended for zero-trust networks for enhanced security and performance. AutoApprovers streamline the management of network routes and exit nodes by allowing designated users to handle route advertisement and approval, which is particularly useful for high-availability deployments and dynamic network management.

ACL tags in Tailscale networks offer a flexible method for managing device access permissions by allowing devices to be tagged according to their purpose, rather than solely by name or IP address. This feature, now generally available across all pricing tiers, enables users to define and apply access controls through an admin console, where tags can be assigned to devices and owned by other tags, effectively functioning as service accounts. The process simplifies network management by allowing devices to inherit permissions based on their tags, and any changes to a device's tags require reauthentication for security. Moreover, ACL tags can be integrated into authentication keys, streamlining the process of registering and managing devices within a network. This facilitates efficient access control, especially in complex networks, by ensuring that devices are managed consistently according to their assigned roles and functions.