March 2024 Summaries

On March 7, 2024, tailscale.com experienced a 90-minute outage due to an expired TLS certificate, largely affecting its marketing materials and documentation, but leaving most user operations unhindered. The incident was traced back to a major website refresh and migration to a new hosting provider in December 2023, which included a unique IPv6 proxy configuration that was deemed a misconfiguration by the provider, preventing automatic certificate renewal. Although probers were in place to check certificate expirations, they only checked over IPv6 and missed the impending expiry. To resolve the issue, Tailscale temporarily removed the "extra" AAAA records and manually renewed the certificates, restoring access swiftly. Moving forward, Tailscale plans to address the root issue with redundant calendar alerts for manual renewals, update their prober infrastructure to separately check IPv4 and IPv6 endpoints, and improve IPv6 support to prevent future disruptions. Despite the outage, Tailscale's design principle of enabling direct connectivity between machines ensured that the majority of users were unaffected.

Tailscale SSH has officially become generally available, providing a zero-trust solution for managing SSH connections by leveraging Tailscale to handle authentication, authorization, SSO, MFA, and key rotation, allowing precise permissions via ACLs. Designed to simplify and enhance SSH processes without requiring additional hardware or firewall rules, Tailscale SSH integrates with enterprise features such as SCIM for user and group provisioning. This tool, now a cornerstone of many enterprise Zero Trust Network Access (ZTNA) strategies, has evolved significantly since its 2022 beta launch, with added features like a browser-based SSH console, remote port forwarding, SELinux support, session recording for compliance, and a VS Code extension for remote file editing. Tailscale SSH is available on Personal, Premium, and Enterprise plans, offering a seamless security enhancement for existing SSH workflows.

Tailscale offers a solution to enhance enterprise security by creating software-defined perimeters that enforce the principle of least privilege without exposing private networks to the public internet. Built on the WireGuard® protocol, Tailscale provides a zero-trust network overlay that facilitates secure, authenticated connections using identity for fine-grained authorizations. Organizations can integrate Tailscale incrementally with existing infrastructure, simplifying network architecture while improving performance through direct UDP tunnels and NAT traversal. Administrators can automate user and group provisioning via leading identity providers, supporting seamless authentication workflows with SSO and MFA. Tailscale's approach to security emphasizes identity as a key component of defense-in-depth strategies, allowing for the segmentation of networks and reduction of user friction. The platform's privacy-led security model avoids deep packet inspection (DPI), focusing instead on encryption and metadata analysis to reduce alert fatigue and control ingest costs. This approach aligns with NIST's zero-trust principles, ensuring robust security without increasing complexity, and mitigating compliance risks.

Tailscale's March newsletter highlights the company's engagement with its user community and its ongoing efforts to enhance user experience through new documentation, resources, and product updates. The newsletter celebrates reaching 5,000 team customers and announces generally available auto-updates with improved usability and control features, including scheduling enhancements and default node enrollment. Tailscale has also introduced Mobile Device Management (MDM) policies for Premium and Enterprise customers, integrating VPN and MDM for enhanced security. A new integration with GitLab aims to bolster security by helping users manage exposed keys. Community contributions showcase creative uses of Tailscale for private service access, database connectivity, and improved SSH connections with Mosh. Tailscale is actively participating in tech events such as SCALE 21x, DevOpsDaysLA, and KubeCon EU, offering webinars to simplify Kubernetes networking. The company encourages users to share their unique Tailscale applications for future newsletters.

Tailscale, a provider of programmable network solutions, has announced an integration with GitLab to enhance security for Tailscale secrets. This integration allows GitLab's Secret Detection feature to scan source code for Tailscale secrets, such as API keys, OAuth client secrets, and webhook keys, and notify users to help prevent unauthorized access. Available on any GitLab tier, this feature is part of a shared security model aiming to maintain the integrity of Tailscale resources. The GitLab Ultimate tier offers additional capabilities for processing secret detection results, and notifications of hardcoded Tailscale secrets are provided in a Secret Detection JSON report.

Tailscale, a company founded in 2019, has reached a milestone of 5,000 paying customers, demonstrating substantial growth, especially in the last year. Initially focusing on supporting smaller, often overlooked projects rather than scaling to a billion users, Tailscale started with just a couple of customers, including Versabank, and went through a journey of raising seed funding, launching a closed beta, and developing a payment system. By 2020, the company had over 100 paying customers, including a significant industrial client that helped Tailscale scale its operations to accommodate large deployments. The company's features, designed for a range of customer sizes, culminated in Tailscale Enterprise, catering to complex environments, and have attracted notable clients like Instacart and Airbus. Despite its expansion, Tailscale remains committed to solving network issues for all users, offering a free personal use option to hundreds of thousands of monthly active users.