App capabilities help you build applications, in any language, with identity and capability awareness
How we built a lightweight identity provider using Tailscale's tools
How tsnet, application security grants, and Funnel combined to build a secure authorization app.
Tailscale Services
Securely connect to and manage access to your internal resources using Tailscale Services.
Workload identity federation: better infra and CI/CD auth with Tailscale
Securely authenticate systems to Tailscale without managing long-lived API keys, auth keys, or OAuth clients.
Tailscale Funnel
Securely route internet traffic to local services using Tailscale Funnel.
Tailworm
The design choices of the open source tailscale and headscale software have created an environment ripe for risk, while marketing security as its design and purpose. Choices have been made to move away from security-in-depth, removing layers of authentication, and replacing daemons such as OpenSSH which employ privilege-separation with a highly-privileged process. Other findings include broader-than-advertised network security boundaries, which seems to be legitimate bugs, but the missing security and isolation is precisely what users are advertised by these tools.
Tailscale | Secure Connectivity for AI, IoT & Multi-Cloud
The connectivity platform for devs, IT, and security teams. Zero Trust identity-based access that deploys in minutes and scales to every resource. Start free.
The best ways to use Tailscale for sharing with friends and family
Using Tailscale's sharing features to make files, self-hosted services, and exit nodes available to your inner circle.
Open source at Tailscale · Tailscale
Read about Tailscale’s open source projects and commitment. Learn how Headscale helps Tailscale users.
How I expose services while self hosting
This post delves into details of how I use Caddy along with Tailscale to expose public and private services
Build a flexible AI stack with Aperture
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
Tailscale: How it works
Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.
Tailscale’d Into Homelabbing
Having my own homelab was something I wanted to try for a long time. However, I just couldn’t get started. Mostly because I kept overthinking it. How will I handle dynamic IPs? Do I need something like a local DNS on my router for that? Even if I solve things inside the home, how am I supposed to access it remotely? Do I need port forwarding at the NAT layer? And what about TLS certificates, how do I even manage those without using a public certificate authority?
The Tailscale node you mail to your parents
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
We're getting close! atlogin.net is a start on the identity side, and we just launched declarative node sharing which lets you share groups of devices with arbitrary outside identities (without them joining your tailnet). tailscale.com/docs/features/declarative-nod…
ATLogin - OIDC for ATProto/Bluesky
atlogin.net