January 2024 Summaries

Tailscale has introduced a significant update to its user invite system, allowing users to invite anyone to their tailnet, regardless of their authentication method, effectively removing previous limitations associated with GitHub-based tailnets. This change marks the culmination of efforts to enhance multi-user personal tailnets, which were first introduced for up to three users for free. The update broadens the accessibility of tailnets to include friends, family, and collaborators, promoting a more engaging and communal use of Tailscale's networking capabilities. The company highlights the diverse user base that includes both individuals and businesses, with many individuals bringing Tailscale into their professional environments after experiencing its benefits at home. The update aims to foster greater connectivity and resource sharing, as exemplified by users sharing media servers, DNS rules, and gaming servers with others.

Aspen Insights addressed a unique on-premise Kubernetes challenge by deploying a load-balanced proxy using Tailscale, an innovative VPN solution that facilitates secure connections without the need for public internet access. Initially, the company used Tailscale subnet routers to connect to Kubernetes clusters securely, but encountered DNS issues when trying to access cloud APIs with private endpoints. To overcome this, they implemented a Tailscale sidecar as a proxy, but this resulted in increased maintenance due to the need for multiple sidecars and secrets management. To streamline the process, Aspen Insights innovatively set up a dedicated Tailscale pod running as a load-balanced proxy, simplifying the configuration and reducing the maintenance workload. This approach eliminated the need for sidecars on each pod and centralized host alias management, making it easier to manage and scale. The solution ultimately provided a scalable, secure, and efficient way to connect on-premise Kubernetes resources to cloud services while reducing complexity and maintenance demands.