Tailcat – Like netcat, but over Tailscale’s data plane (github.com)

Article summary

Tailcat is a new open-source tool that allows for secure, peer-to-peer connectivity over the internet, similar to netcat, but using Tailscale's data plane. It enables users to establish encrypted connections between two machines without the need for a Tailscale account or control plane. The tool uses WireGuard for encryption and DERP for NAT traversal. Tailcat can be used as a CLI tool or library, and it supports various features such as serving local ports, exposing SSH servers, and acting as an exit node.

Main themes

• NAT traversal
• Secure connectivity
• WireGuard
• Tailscale
• Open-source
• Vendor lock-in
• Complexity
• Customizability
• Secure peer-to-peer connectivity
• Encryption
• DERP relays
• Magic Wormhole
• Netcat
• Alternative solutions
• Use cases
• Advantages and drawbacks
• Custom implementations
• Maintenance burdens
• Flexibility
• Trade-offs
• Secure connectivity tools
• Peer-to-peer connectivity
• Internet connectivity
• Security
• Encryption protocols
• Network protocols
• Open-source software
• Software development
• Computer networks
• Internet security
• Peer-to-peer networks
• Network architecture
• Distributed systems
• Security protocols
• Cryptography
• Secure communication
• Internet protocols
• Network security
• Computer security
• Data encryption
• Secure data transfer
• Internet connectivity solutions
• Network connectivity
• Secure networking
• Peer-to-peer security
• Internet architecture
• Network design
• Security architecture
• Distributed security
• Cryptography protocols
• Secure internet connectivity
• Internet security protocols
• Network encryption
• Secure network protocols
• Computer network security
• Internet security solutions
• Peer-to-peer internet connectivity
• Secure peer-to-peer internet connectivity
• Internet connectivity tools
• Network connectivity tools
• Secure networking tools
• Peer-to-peer networking tools
• Internet security tools
• Network security tools
• Computer security tools
• Data security tools
• Secure data transfer tools
• Internet connectivity software
• Network connectivity software
• Secure networking software
• Peer-to-peer networking software
• Internet security software
• Network security software
• Computer security software
• Data security software
• Secure data transfer software
• Internet architecture software
• Network architecture software
• Security architecture software
• Distributed security software
• Cryptography software
• Secure communication software
• Internet protocols software
• Network protocols software
• Security protocols software
• Cryptography protocols software
• Secure internet connectivity software
• Internet security protocols software
• Network encryption software
• Secure network protocols software
• Computer network security software
• Internet security solutions software
• Peer-to-peer internet connectivity software
• Secure peer-to-peer internet connectivity software
• Internet connectivity solutions software
• Network connectivity solutions software
• Secure networking solutions software
• Peer-to-peer networking solutions software
• Internet security solutions software
• Network security solutions software
• Computer security solutions software
• Data security solutions software
• Secure data transfer solutions software

What commenters say

• Some commenters believe that Tailcat's NAT traversal feature is not a significant advantage, as they have found alternative solutions to work around NAT issues.
• Others argue that NAT traversal is a crucial feature, especially in scenarios where dynamic DNS and port forwarding are not feasible or convenient.
• A few commenters think that using Tailcat is equivalent to using existing tools like WireGuard or netcat, and that the added value of Tailcat is not substantial.
• Some argue that the openness of Tailcat's source code and the ability to run one's own DERP server mitigate concerns about vendor lock-in.
• There are differing opinions on whether the complexity of setting up WireGuard is a significant barrier to adoption, with some finding it easy to configure and others struggling with it.
• A few commenters draw parallels between Tailcat and other projects, such as Magic Wormhole, and discuss the trade-offs between different approaches to secure connectivity.
• The use of DERP relays and the potential for custom implementations are seen as both advantages and potential drawbacks, depending on the context and requirements.
• Some commenters appreciate the flexibility and customizability of Tailcat, while others are concerned about the potential for added complexity and maintenance burdens.