October 2023 Summaries

Tailscale, a programmable network known for its ability to manage connections using ACLs, has released the Tailscale Kubernetes operator in beta, allowing users to seamlessly integrate Kubernetes services with their existing networks. This infrastructure-agnostic tool enables connectivity between resources regardless of their location or form, whether they are in the cloud, on-premises, or in containers. While not a traditional service mesh, Tailscale facilitates secure, peer-to-peer networking with end-to-end encryption and can interoperate with service meshes to extend connectivity beyond containerized services. The new operator simplifies the deployment of Tailscale within Kubernetes clusters, enabling users to expose services to their tailnet and securely connect to the Kubernetes control plane without internet exposure. It offers flexibility in connecting containerized and non-containerized workloads and supports both ingress and egress traffic management. The Tailscale Kubernetes operator can be deployed using a Helm chart or a manifest file, reducing setup overhead and allowing for dynamic proxy management as services are exposed.

Tailscale is enhancing its client software by introducing auto-update features across all platforms to streamline the process of implementing performance improvements, new features, and security fixes. While platforms like the Apple App Store and Google Play Store already offer automatic updates, Tailscale has developed its own system for those that do not. The auto-update option, available in Beta starting with Tailscale 1.52, is off by default, allowing users to enable it manually if desired. Tailscale ensures stability through thorough testing, with stable releases being even-numbered versions, and encourages users to perform regular small updates to maintain system reliability. The company is also working on improving update scheduling to minimize disruptions and is providing tools for administrators to manage updates within organizations, thereby enhancing the overall user experience, whether for individual users or corporate environments.

Tailscale has revamped its Serve and Funnel features in version 1.52 to simplify the process of sharing local services, files, or directories either with a user's private tailnet or the entire internet. These updates streamline the user experience by allowing key tasks to be performed with a single command, such as sharing a local port by entering "tailscale funnel 3000" or making it available only to a tailnet with "tailscale serve 3000." While retaining all advanced functionalities, these changes aim to make the tools more intuitive and aligned with user needs, especially for those looking to serve content either publicly or privately without frequent switching. The improvements were driven by community feedback and internal usage insights, with the goal of making Serve and Funnel more accessible and useful for both new and existing users.

In the September newsletter, Tailscale announced several updates, including the addition of Apple TV to its supported devices, allowing for secure media sharing and integration into a tailnet using new VPN functionalities in tvOS 17. They also partnered with Mullvad to provide users access to Mullvad's global VPN server network as exit nodes, enhancing privacy while browsing. Tailscale completed its 2023 SOC 2 Type II reassessment, affirming its commitment to data security. Community contributions highlighted include using AWS Lambda extensions to create secure VPN tunnels with Tailscale and employing Tailscale for authenticating internal tools. The newsletter also mentioned Tailscale's presence at several events across North America and the UK, along with a customer case study on Finter, a startup utilizing Tailscale to manage its IoT network over 4G, specifically for remote camera management.