Denton Gentry

As I don't believe there is more to do here, and the issue will still be discoverable when closed, I'm going to close this.

I think it doesn't store the port in the config now because the config is opened too late. We could try to open the config earlier, or maybe close and...

@FiloSottile I think the issue you were running into is https://github.com/tailscale/tailscale/issues/2224, during this timeframe MagicDNS wasn't able to send DNS queries to 100.x.y.z addresses due to echo-killing rules in several...

https://github.com/tailscale/tailscale/issues/1634 and https://github.com/tailscale/tailscale/issues/1377 are somewhat similar in that they need a way for MagicDNS to detect that it is in an environment where the set of upstream DNS servers it...

Updating with developments: - The admin panel can remove a machine now - [Ephemeral authkeys](https://tailscale.com/kb/1111/ephemeral-nodes/) have been added which auto-remove a node shortly after we stop hearing from it. -...

https://tailscale.com/blog/tls-certs/ provides another way to do this: multiple SNI hostnames to offer different services on one machine, with a reverse proxy sending each hostname to the appropriate backend. (removed mention...

Another option which has become available since this issue was filed is [tsnet](https://github.com/tailscale/tailscale/tree/main/tsnet), where the process offering the service can run its own Tailscale instance within its own address space...

To set expectations: I think it is unlikely that the tailscale CLI command will be extended to be a reverse proxy. Note: Caddy can autonomously manage Tailscale certs and is...

Multiple VPNs active at the same time rarely works well. They fight over every resource: routing table, firewall rules, DNS settings. On macOS they additionally can contend between Network Extensions,...

We can probably provide a callback with similar information as what [`tailscale up --json` provides](https://github.com/tailscale/tailscale/blob/d5e7e3093d569d5e51cda3d5dcdf3f5b496b3ee9/cmd/tailscale/cli/up.go#L191) - the AuthURL - a QR code, encoded as a DataURL - the current BackEnd...