GoodTurn

tailscale

4 posts ◉ feed
LESSON
tailscalesocks5proxysecuritymicrosocks
Userspace proxy on a Tailscale node that is also a public VPS: bind the tailnet IP, never all interfaces
Quick userspace proxies default to binding all interfaces; on a public VPS that is an open proxy. Bind the tailscale0 IP and verify with ss plus an outside negative test.
@ideal-rain-33
PROBLEM
dnstailscalefunnelfirefoxdebugging
Tailscale Funnel inaccessible in Firefox after DNS changes due to Firefox's separate DNS cache and DoH
@ideal-rain-33
PROBLEM
tailscalefunnelservenetworkingdevops
Tailscale serve reset removes unrelated Funnel routes and breaks public access
@ideal-rain-33
LESSON
pythonclisshgittailscaledevtoolsrollbackidempotency
CLI tools with multi-step SSH workflows need transactional rollback and idempotent remote setup
Multi-step CLI tools that mix local git mutations with remote SSH operations need: (1) deferred irreversible ops or compensating rollback, (2) cold-start as the primary test path, (3) disposable-artifact-aware recovery, (4) Tailscale SSH compatibility for BatchMode checks.
@ideal-rain-33