August 2023 Summaries

Tailscale's August newsletter highlights a range of activities and updates, including their presence at Black Hat Las Vegas and upcoming appearances at events like GopherCon and All Things Open. The company introduced new features such as user and group provisioning for Azure AD, Tailnet lock for node management, and a significant upgrade to their VS Code extension with Machine Explorer. They also launched tclip, a tool for sharing text snippets within a tailnet. The newsletter features community contributions, including a DIY NAS project using Tailscale and a customer success story from Mercari, which significantly reduced VPN-related issues by adopting Tailscale. Tailscale is continuing to grow, with open positions available for those interested in joining their remote team.

Syncing Azure Active Directory (Azure AD) users and groups to Tailscale streamlines the processes of onboarding and offboarding employees by automating user and group provisioning, which helps mitigate risks associated with former employees retaining access to company resources. This integration, currently in beta, allows organizations to synchronize deleted users and group memberships from Azure AD to Tailscale, ensuring that personnel changes are accurately reflected across systems. Tailscale leverages the existing identity provider (IdP) for authentication and access rules for authorization, eliminating the need for manual updates when roles change. By utilizing the SCIM protocol, Tailscale dynamically recognizes changes in group names and memberships, allowing administrators to efficiently manage access through a centralized identity provider. This feature is particularly beneficial for large organizations with frequent organizational changes, as it simplifies user management and access control across applications. Enabling this integration requires configuring SCIM on both Tailscale and Azure AD, linking accounts, and setting up the necessary provisioning details, with the feature being available within Tailscale Enterprise.

Tailscale has introduced a major upgrade to its VS Code extension, now featuring the Machine Explorer, which allows developers to explore, edit, and transfer files across nodes in their tailnet via Tailscale SSH. This enhancement integrates smoothly into the VS Code environment, enabling developers to work efficiently with remote files without the hassle of traditional tools like nano or scp. The extension offers functionalities such as accessing a node's DNS name, IP address, and extended information, and it supports Tailscale Funnel for sharing services from localhost to the public internet. Demonstrated through various use cases, such as setting up a Factorio server or managing a web portfolio site, the extension simplifies tasks like transferring save files, configuring servers, and managing Kubernetes systems. To utilize the extension, users need a Tailscale account and client, and it is available for installation via the VS Code Marketplace. The open-source code is hosted on GitHub, providing further transparency and user engagement through platforms like Twitter, Mastodon, and Reddit.

Tailscale has introduced Tailnet Lock in beta, a feature that enhances network security by allowing users to verify that new nodes can only be added to their network if signed by existing trusted nodes. This development addresses concerns about relying on a third-party provider for network management and includes improvements such as usability with mobile devices, recovery mechanisms for compromised networks, and compatibility with various Tailscale features. The feature, initially available through the Tailscale CLI, now offers a step-by-step tutorial in the admin console for easier setup. Tailnet Lock also includes mechanisms to recover from key compromises by revoking and re-signing with trusted keys, ensuring continuous network control. Further developments are underway, including support for Android devices and enhanced trust verification from the Tailscale coordination server, as Tailscale continues to prioritize security and privacy in managing user networks. Users are encouraged to update to Tailscale v1.46.1 or later to access the latest improvements and can explore more through the documentation and technical white paper.

The integration of Tailscale with Panther Labs for log streaming has reached general availability, allowing users to route Tailscale audit and network logs directly to Panther for enhanced monitoring and security. This feature enables users to monitor their tailnet, create custom detections, and set up detailed alerts while benefiting from Panther's pre-existing detection rules for Tailscale logs. The service is offered to customers on the Enterprise plan and can be activated by Tailscale owners and administrators. Users interested in utilizing this feature can initiate the process through the admin console, with further details available on the Tailscale Log Monitoring page.