January 2025 Summaries

Chris Chang, Director of New Business Sales at Tailscale, provides insights into common use cases for Tailscale's VPN product through conversations with customers. These use cases include business VPN for remote access, secure infrastructure access, Kubernetes networking, CI/CD connectivity, developer application testing, and secure access for edge and industrial IoT devices. Tailscale is valued for its security, scalability, and user-friendly experience, which is crucial for non-technical users. It utilizes the WireGuard protocol for high performance and roaming capabilities, and integrates with Mobile Device Management and Endpoint Detection and Response systems for streamlined management. Tailscale's features like MagicDNS, ACL Tags, and Tailscale SSH offer enhanced connectivity and security while supporting compliance and troubleshooting needs. The product is adaptable for various environments, such as regulated industries and IoT devices, by providing connectivity through NAT traversal without extensive firewall changes. Tailscale's ability to securely connect and manage access to different resources is highlighted as a significant advantage for organizations looking to protect and efficiently manage their networks.

Tailscale's January 2025 newsletter highlights significant achievements and updates, including surpassing 10,000 business customers and the appointment of Grace Lin as the new SVP of Operations. The company emphasizes its mission to create small, powerful networks, as discussed by CEO Avery, and introduces new integrations, such as with Jamf Pro for Apple device management and enhanced node monitoring through Prometheus. The newsletter also features community projects like Project Bob's autonomous oceancraft and a minimalist Linux distribution integrating Tailscale, along with upcoming webinars and industry events. Tailscale invites users to share their innovative uses of the platform for potential inclusion in future newsletters.

Chris Chang, Director of New Business Sales at Tailscale, shares insights from his experience with customers, highlighting common business challenges that lead to the adoption of Tailscale's VPN alternative. The blog post discusses typical pain points such as user dissatisfaction with legacy VPNs, compliance audits, business scaling, cloud or data center migrations, and new product launches. Tailscale addresses these issues by offering simplified connectivity, enhanced security measures, and infrastructure-agnostic solutions that integrate with existing identity providers and support various computing environments, including VMs, containers, and serverless architectures. The company boasts significant improvements for customers, such as reduced helpdesk tickets and faster setup times, providing a seamless user experience through features like NAT traversal and device approvals. As part of a two-part series, this article encourages readers to explore Tailscale's capabilities further and consider a trial to experience its potential benefits firsthand.

Tailscale has announced a collaboration with GitHub to enhance the security of its network by integrating secret scanning capabilities. This partnership allows GitHub to scan source code, issues, pull requests, wikis, and other data for Tailscale secrets, such as API keys, OAuth client secrets, and SCIM keys. If a potential match is found, GitHub verifies it with Tailscale, which will then revoke the active secret and notify users via email. This initiative, which began quietly in October, has already led to the revocation of over 3,500 keys. The secret scanning is available for public GitHub repositories and, with GitHub Advanced Security, supports private repositories, reflecting a shared commitment to a robust security model.

Jamf Pro, a leading mobile device management solution for Apple devices, now integrates with Tailscale, streamlining the installation and configuration process for IT administrators handling macOS, iPadOS, and iOS devices. This integration leverages Tailscale's device posture management features, allowing administrators to enforce specific access rules, such as ensuring the macOS firewall is enabled, to enhance security across networks. By combining the capabilities of Tailscale and Jamf Pro, teams can implement robust, zero-trust security measures more efficiently and effectively. This integration is particularly beneficial for those already using Tailscale for networking and Jamf Pro for device management, as it facilitates the maintenance and logging of security rules within Tailscale's ACLs and is available to Enterprise plan users.

Beszel is a lightweight server monitoring tool, ideal for providing basic metrics like temperatures and disk usage on servers connected to a Tailscale network. It operates on Linux through Docker or systemd and on Macs using launchd, though it presents challenges when running on Windows, which are addressed in a separate blog post. The tool is particularly useful for GPU monitoring, whether for gaming or AI model execution, and its integration with Tailscale simplifies network management by allowing the addition of any host globally. The blog post emphasizes the importance of monitoring systems to prevent server issues, comparing Beszel to more complex solutions like Prometheus and Grafana. Additionally, the author teases an upcoming YouTube video on a new Tailscale client metrics feature for direct integration with Prometheus.

Tailscale, a company focused on simplifying internet connectivity, is celebrating significant milestones including surpassing 10,000 business customers and welcoming Grace Lin as the new SVP of Operations. This rapid growth, doubling in just ten months, underscores the increasing demand for simple and secure networking solutions, not just for large companies but also for personal users and small teams. Tailscale's impact spans diverse use cases, from AI startups like Mistral AI and Cohere to individuals managing home networks, illustrating its versatility in connecting devices seamlessly without the complexities of traditional network setups. Grace Lin's expertise in scaling operations is seen as pivotal for Tailscale's future, aiming to expand its reach while maintaining simplicity at its core. Tailscale envisions becoming as integral to the Internet as plumbing is to infrastructure, emphasizing its role in fostering a connected world without the traditional networking hurdles.

Installing Tailscale on macOS can be done using one of three versions: the standalone variant, the Mac App Store variant, and the tailscaled variant. The standalone variant is recommended for most users due to its enhanced security and usability, leveraging system extension-based VPN implementations introduced in macOS 10.15, which provide better security than the older kernel extensions. The Mac App Store variant requires an Apple Account and cannot detect third-party tools that might interfere with VPN tunnels. The tailscaled variant, suited for experienced administrators, lacks a GUI and is managed via command line, allowing operation without user login but is not recommended for production use. It is advised not to install both the standalone and Mac App Store variants simultaneously due to potential conflicts, and users should uninstall one version completely before switching to another. Detailed documentation and a comparison table are available to help users decide which variant best suits their needs, and a sales contact form is available for those interested in deploying Tailscale in professional environments.

Avery Pennarun, CEO and co-founder of Tailscale, discusses the dramatic advancements in computing technology over the past two decades, highlighting significant increases in computational speed and storage capacity. CPUs and GPUs have vastly improved, enabling computations that are exponentially faster compared to 2004. Similarly, RAM and hard disk storage capacities have grown substantially, while SSDs offer far greater transaction speeds and reliability than their spinning disk predecessors. These technological improvements have led to a shift in how we approach server architecture and computing problems, allowing modern systems to handle workloads that would have required thousands of computers in the past. Pennarun emphasizes that while traditional distributed computing models were once necessary, the current power of individual machines allows for simpler and more efficient designs, underscoring how technological progress often outpaces the challenges it aims to address, inviting us to embrace and enjoy this new era of computing capabilities.