Tail Scale
The article discusses scaling limitations and operational challenges encountered when using Tailscale for network connectivity in a growing organization, highlighting issues with authentication load, ACL complexity, and coordination overhead as the number of nodes and users increases.
Background
- **Tailscale** is a commercial VPN / mesh-networking service built on top of the open-source WireGuard protocol. It lets devices (laptops, servers, phones) securely connect to each other over the internet as if they were on the same local network, without needing to open firewall ports or configure complicated tunnels.
- The article's title *"Tail Scale"* is a pun — it discusses whether Tailscale's architecture and business model can scale up from small teams and hobbyists to large enterprise deployments. Key concerns include reliance on a central coordination server ("coordination server" or "coordinator") and the performance overhead of its NAT-traversal and relay techniques.
- Tailscale emerged from the Y Combinator startup accelerator and has grown quickly, partly because it makes WireGuard easy to use. Its main competitors include traditional VPNs (OpenVPN, IPsec) and newer mesh overlays like ZeroTier and Netmaker.
- This matters because many tech workers now use Tailscale for remote access, homelabs, and cloud infrastructure; whether it can handle enterprise-scale security, latency, and management will determine if it replaces older VPN tech at large organizations.