Tailscale Funnel (tailscale.com)

Article summary

Tailscale has introduced a new feature called Funnel, which allows users to expose their Tailscale nodes to the public internet. This feature enables users to receive incoming connections from the internet, such as webhooks or HTTPS requests, without requiring a public IP address. Funnel works by proxying TCP connections from Tailscale's servers to the user's node, using the WireGuard protocol for encryption. The feature is currently in alpha and only supports Tailscale's own domain names, but may be expanded to support custom domains in the future.

Main themes

• Tailscale Funnel
• IPv6 adoption
• peer-to-peer networking
• security and privacy
• tunneling solutions
• network architecture

What commenters say

• Tailscale Funnel is a useful feature for hosting public services from a home lab or other private network.
• The lack of support for custom domains is a significant limitation of the current implementation.
• IPv6 is a more fundamental solution to the problems of IP exhaustion and NAT, but its adoption is not yet widespread.
• Tunneling solutions like Tailscale Funnel may be more secure than direct peer-to-peer connections, especially when used with sandboxing or containerization.
• The use of SNI routing and TLS encryption in Funnel may have implications for privacy and security, particularly if SNI encryption becomes more widely adopted.
• Some commentators believe that IPv6 will eventually become the dominant protocol, but others are skeptical due to the complexity and cost of implementation.
• The trade-offs between tunneling solutions like Funnel and direct peer-to-peer connections over IPv6 are a subject of debate, with some arguing that the extra hop and lack of UDP support are significant drawbacks.