Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Tailscale somehow found use for self-hosters, despite being wildly unergonomic for an all-Linux, non-corporate, network. Yggdrasil lacks marketing effort, but is otherwise a great option.


I actually use Yggdrasil in lieu of Tailscale because I love the idea of a decentralized routing system.


I never understand why people enjoy having a centralized control plane.


easier to implement and understand


I can't tell if you're being sarcastic, but assuming you're not: Tailscale makes security easier because networks are private by default. To achieve a similar effect with Yggdrasil you'd have to use a firewall to whitelist the Yggdrasil IPs of all your devices. So it's more work to set up.


You have to use a firewall anyway. If you use Tailscale, you have two firewalls, which is not strictly easier.


Huh? I thought one of the appeals of Tailscale is that security is done at the network level; plus that your network is private, so you don't get randos knocking at your ports.


What does “at the network level” mean?..

Anyway; Tailscale is not your only network. If you’re on a laptop, you need to be able to log onto rando wifi networks. If you’re at home, you need to be mindful of your smart fridge going rogue. You need to run a firewall. Tailscale adds a separate, Tailscale-specific, firewall with centralized management. Now you have two firewalls.


Ah, I see what you mean now. Yes, that's true; you'd still need a firewall for LAN.

> What does “at the network level” mean?..

I meant the normal non-Tailscale firewall (e.g. iptables).




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: