Hacker News Reader

Yes, this is a real concern. No matter how good tail scale guys are, their control plane services become super attractive target for attackers (solar wind style attack). Tailscale could provide a "Github Enterprise" style on-prem deployable control plane services running on enterprise controlled domain and with its own BYOK infra. This would majorly address the concern.

View on HN

FWIW, we do sell an on-prem version to certain customers. It's not widely available anybody yet, but it exists.

(I work at Tailscale)

That's awesome. When it becomes widely available, I would be inclined to talk to my boss about it :-)

A generally available version of this would be a killer feature.

Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale.

Even with a on-prem control plane, you probably want logging setup to detect when unusual nodes get pushed to the accessible list of nodes on your clients.

Reply on news.ycombinator.com