February 2024 Summaries

Tailscale's auto-update feature has reached General Availability (GA), offering enhanced usability and control to minimize disruptions during updates. The system intelligently schedules updates based on device activity, delaying them during high-use periods such as video calls or active SSH connections, ensuring minimal interference. The updated admin console provides improved management tools, allowing administrators to filter nodes by update status and manually trigger updates when necessary, provided certain conditions are met. Additionally, a new default setting allows all newly registered nodes to have auto-updates enabled, although this can be adjusted by tailnet admins. The intention behind these updates is to streamline the update process and enhance security practices by making auto-updates a default feature for new tailnets, although administrators retain the ability to opt out if desired.

Tailscale has announced the general availability of its Mobile Device Management (MDM) policies, offering enhanced control and security for its Premium and Enterprise customers by integrating with existing MDM solutions like JAMF, Microsoft Intune, and Kandji. These policies enable organizations to customize the Tailscale client experience across Windows and Apple devices by configuring system policies tailored to user needs, such as hiding menu options or enforcing continuous operation of the Tailscale client. The MDM integration allows for automatic updates and restricts corporate devices from accessing personal networks, ensuring network integrity for remote workers. Tailscale's VPN, built on the WireGuard protocol, provides a secure and private identity-based networking solution, and these new MDM policies further enhance its flexibility and security for corporate environments.

The article explores the integration of Tailscale with Docker to create secure, trusted networks using containers, allowing them to function as nodes on a Tailscale network or "tailnet." This setup facilitates seamless connectivity across various network topologies without requiring complex firewall rules or reverse proxies. The discussion includes two methods for adding containers to a tailnet: using auth keys and OAuth secrets, each with distinct features and applications. The article provides detailed steps on configuring Tailscale with Docker, including setting environment variables, mapping volumes for session persistence, and using network modes to link containers, enabling services like a web server to route traffic through Tailscale. Additionally, the piece touches on advanced configurations like using Tailscale Serve and Funnel to expose services locally and publicly, illustrating the flexibility and scalability of combining Tailscale and Docker for various applications.

Tailscale has announced a new integration with GitGuardian, a code security platform, to enhance the security of Tailscale secrets within customer networks. This collaboration allows GitGuardian to scan source code for Tailscale secrets such as API keys, pre-authentication keys, OAuth client secrets, SCIM keys, and webhook keys, notifying users if these secrets are active and allowing for their revocation. The integration aims to strengthen the security model by ensuring these keys are protected, providing automatic secret scanning across all of GitGuardian's plans. Users can leverage this feature by integrating their GitHub, GitLab, or Bitbucket repositories with GitGuardian, which will alert them through the GitGuardian dashboard if any hardcoded Tailscale secrets are detected.