Embed a Tailscale Funnel in your Go app | Hacker News Reader

Embed a Tailscale Funnel in your Go app

tailscale.dev

63 pointstodsacerdoti16 comments

This is interesting. Ngrok also released a go library recently allowing you to use it directly inside of API. Loving the direction for all these tunnel technologies. I wish there was a simple open source and self hosted version of this.

OpenZiti project is 100% open source and has SDKs for many languages - e.g., Go, Python, C, C#, Java, NodeJS, Javascript, Kotlin, Swift, etc. We also built zrok which is a 'ziti-native' app to prvide ngrok type functionality. It is open source and can be self-hosted if you wish - https://zrok.io/.

Not sure I understand? The one from Tailscale is open source, and you can self-host it (they mention putting it on fly.io, for example), or run it on a home computer.

Unless I am mistaken, only the Tailscale endpoints are open source (e.g., this SDK), the control and dataplane is closed source. While Headscale exists I am not aware of it providing Funnel functionality. I understand the Funnel infra is all hosted and managed by Tailscale so you cannot self-host.

Headscale seems to implement (almost?) all of the current Tailscale functionality, so I wouldn't be surprised if they added support for this too. They even seem to be friendly with the Tailscale folks.

Looks like it cannot today - https://github.com/juanfont/headscale/issues/1040

It's not easy and you end up running into all sorts of issues in practice. I gave up.

You download the official client and Little Snitch goes crazy because it connects to so many unknown addresses.

That's Tailscale finding the nearest DERP relay, measuring timings to different locations.

This may help you quiet, or train, Little Snitch...

https://tailscale.com/kb/1082/firewall-ports/

=> https://github.com/anderspitman/awesome-tunneling A list of open source, self-hostable, tunneling options.

I love this idea of “wherever your service ends up, it will reach out and sort out its DNS and networking so that the world can find it at the usual address”

Moving things from one platform to another is often simple enough on the deployment front. Reconfiguring load balancers, DNS, etc is not rocket science but it’s a hassle. In this version of the universe, I can just fling a service from my home pc to a data center and nothing really needs to know? That’s awesome.

Obvious practical limitations around latency, load balancing multiple services, etc. Hamd wave over that for the moment. This flavour of idea is exciting!

Yeah it's similar to yggdrasil and the dream of ipv6 everywhere--if everything has a static IP then there's no drama or trouble routing to anything else in the entire internet. Definitely worth checking out IMHO: https://yggdrasil-network.github.io/

One thing is not clear here. According to [1], funnel is invite only feature. There's no mention of invite for this Go API.

Do I need invite or not?

1: https://tailscale.com/kb/1223/tailscale-funnel/

If you have an invite to Funnel, you can use the Go API.

Looking forward to trying this. Love the idea of being able to easily share whatever goofy project I’ve got going on on my dev server with friends who aren’t technically inclined.

Does it work with rust?

Reply on news.ycombinator.com