April 2025 Summaries

Avery Pennarun's journey to founding Tailscale is a story of technical innovation driven by personal necessity and a vision for simplifying network infrastructure. Beginning with a sibling rivalry over modem access, Avery taught himself to write Linux drivers and eventually founded Net Integration Technologies, which was acquired by IBM, illustrating his belief in ease of use as a strategic advantage. His experience at Google highlighted the inefficiency of large-scale infrastructure for smaller projects, inspiring him to create Tailscale, a VPN solution designed to secure access without requiring extensive reconfiguration. Tailscale's appeal lies in its ability to make peer-to-peer networking simple and secure, resonating with a diverse range of users from hobbyists to corporate IT teams. This success, marked by a viral Hacker News post, underscores the unmet demand for user-friendly, scalable network solutions.

Tailscale recently announced a $160 million Series C funding round, led by investors such as Accel and Insight Partners, which will help the company accelerate development on validated ideas and customer-requested features, focusing on engineering and quality improvements rather than new ventures. In a fireside chat, CEO Avery Pennarun and CSO David Carney discussed the company's unique growth journey, emphasizing their intentional choice of investors who align with Tailscale's long-term vision and their commitment to avoiding the pitfalls of aggressive monetization strategies that can degrade product quality. Tailscale's approach centers on word-of-mouth growth driven by user satisfaction, with features like identity-first networking and tsidp that cater to both individual users and large enterprises. The conversation highlighted the company's dedication to maintaining product integrity while scaling, addressing the needs of diverse users ranging from homelab enthusiasts to enterprise clients, and avoiding compromising quality for growth.

Avery Pennarun, CEO and co-founder of Tailscale, explores how AI is transforming software development and the broader implications for society. He notes that AI-assisted software development is already helping non-programmers write code and allowing programmers to automate mundane tasks, but its full integration into cognitive workflows is still evolving. Pennarun highlights how AI usability testing, with its ability to reset and retest quickly, is revolutionizing the way platforms and frameworks are optimized, potentially making them more accessible to the average user. He argues that while AI tools are competent and consistent, they still fall short of human expertise, especially in complex tasks like secure Kubernetes deployments. However, Pennarun is optimistic that the need to accommodate AI capabilities might drive the simplification of software stacks, ultimately leading to more secure and user-friendly software solutions. He also reflects on the broader societal trend of prioritizing fast feedback loops in software over addressing larger infrastructure issues, suggesting that AI might help correct this imbalance by pushing for usability and simplicity.

Avery Pennarun, CEO and co-founder of Tailscale, argues that modern technology has outpaced the need for complex, internet-scale infrastructure in most business applications. While the computing power of today’s smartphones surpasses that of supercomputers from fifteen years ago, software development often remains unnecessarily complex, mimicking the intricate architectures of tech giants like Google. However, this overengineering is not only unnecessary for most businesses but can also hinder growth by increasing system fragility and maintenance costs. Pennarun advocates for a shift towards simplicity by utilizing modern hardware capabilities, such as edge computing, to perform tasks locally on devices, thereby reducing latency and improving operational efficiency. He emphasizes that scaling should be based on current needs rather than hypothetical future growth, encouraging developers to design straightforward architectures that leverage the power of contemporary devices and tools while avoiding premature optimization.

Tailscale app connectors offer a solution for routing traffic through specific parts of your infrastructure, acting as domain-specific exit nodes that allow you to direct packets wherever needed, similar to split DNS but for routing. They enable scenarios such as routing traffic through a particular location to alter the perceived geolocation, as demonstrated by rerouting U.S. traffic via the UK to change the IP address visible to websites. App connectors facilitate various routing patterns, especially useful for services requiring traffic from known locations, and come pre-configured for applications like Salesforce, JIRA, GitHub, and Google Workspace. Users can explore the Tailscale documentation for setup details and start using app connectors through the Tailscale admin console.

Tailscale has secured $160 million USD in its Series C funding round, led by Accel and joined by notable investors, to accelerate its mission of simplifying networking by focusing on identity-first connectivity rather than traditional IP-based methods. Founded in 2019, Tailscale aims to eliminate the complexities of network configurations, such as VPNs and NAT traversal, making secure connections seamless and intuitive for users ranging from individual hobbyists to large corporations. The recent surge in opportunities, particularly within the AI industry, has highlighted the need for robust, scalable network solutions that can handle complex tasks like connecting GPUs across clouds and securing workloads globally. The new funding will enable Tailscale to expand its engineering and product teams, support its promise of free services, and enhance its backward compatibility platform to better serve a diverse clientele that includes companies like Instacart, SAP, and Duolingo. The investment reflects a strategic shift in network security and identity management, emphasizing a move from data centers to individual devices and user-centric connectivity.

Tailscale, celebrating its five-year anniversary, reflects on its journey of simplifying secure private networking, emphasizing the importance of reliability and usability as core product features. The company highlights the versatility of its product, which caters to a diverse user base ranging from homelab enthusiasts to large enterprises, and the unexpected overlap of use cases across different scales. Tailscale attributes its success to its minimalist approach, allowing devices to connect directly with end-to-end encryption, and its commitment to a Zero Trust model, which increases user control and trust. To commemorate the milestone, Tailscale is offering a giveaway of five lifetime Personal Plus plans to engage its community.

The Tailscale Kubernetes Operator is now generally available, offering users a secure way to connect resources across various environments, such as cloud, on-premises, and containers, by allowing encrypted and authenticated connections. Since its beta release over a year ago, it has been adopted by thousands of organizations for production use, providing solutions like secure API server proxying, which eliminates the need for public IPs and allows tailored access based on Tailscale identities. The operator facilitates internal access to Kubernetes clusters and applications, essential for regulated industries needing compliance and secure connections for geographically dispersed teams. It supports native Kubernetes mechanisms for easy integration and TLS management for HTTPS-based applications, while also enabling network layer proxies for other protocols. Additional features include session recording for security compliance and the ability to host Tailscale resources within Kubernetes using a newly added Connector CRD. Future enhancements aim to improve availability with high-availability (HA) mode for cluster proxies to ensure continuous access to critical services.

In a detailed recount of an April Fools’ Day project, the author describes the unexpected reality of porting Tailscale to the Plan 9 operating system, humorously initiated as a joke but ultimately becoming a genuine technical endeavor. Despite initial setbacks due to outdated Go compiler support for Plan 9, collaboration with Russ Cox led to significant kernel improvements, enabling Tailscale to function on this niche platform. The process involved navigating unique challenges such as adapting networking through a simplified TUN implementation, addressing memory and routing issues, and even enhancing SSH capabilities by leveraging Plan 9's distinct system features. The effort underscored the educational value and unexpected benefits of tackling unconventional projects, resulting in improvements to Go's Plan 9 support and a newfound appreciation for the peculiarities of the Plan 9 ecosystem. The narrative closes with a tongue-in-cheek reflection on the project’s whimsical origins and a light-hearted acknowledgment of the teamwork and community engagement that made it possible.

Tailscale has announced the integration of its peer-to-peer networking capabilities with Plan 9 from Bell Labs, an operating system known for its innovative approach to managing networks and computing resources. This integration allows Plan 9 users to connect machines globally with no manual configuration, leveraging WireGuard for secure, encrypted communication. The collaboration unlocks features such as global namespaces and seamless interaction with distributed resources, while also introducing Tailscale SSH for secure connections. The integration is offered free under an OSI-approved license, with enterprise support available for purchase. Users can access the software through various means, including a web-based emulator and a downloadable disk image, with immediate availability announced. The launch has been met with enthusiasm from the Plan 9 community, and further insights will be shared in an upcoming webinar.