headscale icon indicating copy to clipboard operation
headscale copied to clipboard

FR: support for App Connectors

Open igrikus opened this issue 2 years ago • 15 comments

Why

Tailscale launches new App Connectors feature to allow some traffic to pass through specific servers. For example, I have access to example.com only through my edge server running Tailscale with the --advertise-connector flag.

Description

It's like exit-node, but for specific domains only, and as far as I understand, configuration must be done on Headscale side.

igrikus avatar Dec 13 '23 16:12 igrikus

This issue is stale because it has been open for 90 days with no activity.

github-actions[bot] avatar Mar 13 '24 01:03 github-actions[bot]

This issue was closed because it has been inactive for 14 days since being marked as stale.

github-actions[bot] avatar Mar 21 '24 01:03 github-actions[bot]

This would be really awsemoe to implement. Can we reopen the issue?

vdovhanych avatar Mar 22 '24 08:03 vdovhanych

Hi @kradalby, could you reopen this issue? It seems that lots of people are interested in this feature

SamyDjemai avatar Oct 17 '24 15:10 SamyDjemai

I have some code to share soon that helps with mimicing app connectors outside of the control plane: a little app that keeps tailscale route advertisements in sync with DNS host resolution for a list of hostnames. It doesn't exactly replace app connectors but it helps for a lot of use cases.

benley avatar Oct 17 '24 15:10 benley

@benley

How soon? I just want to write same feature, but since you've already done it, I'd like to support it and not write it from scratch.

Beshelmek avatar Oct 20 '24 20:10 Beshelmek

It will be just a few days, I was waiting for someone at work to sign off on publishing it.

benley avatar Oct 20 '24 20:10 benley

It will be just a few days, I was waiting for someone at work to sign off on publishing it.

Here we go, finally: https://github.com/singlestore-labs/tailscale-manager

benley avatar Oct 25 '24 18:10 benley

It will be just a few days, I was waiting for someone at work to sign off on publishing it.

Here we go, finally: https://github.com/singlestore-labs/tailscale-manager

It would be better to implement this feautre in headscale.

yangboyd avatar Feb 28 '25 03:02 yangboyd

How hard can it be to implement AppConnector into Headscale? tailscale client side is open source???

kgncengiz avatar Apr 13 '25 15:04 kgncengiz

How hard can it be to implement AppConnector into Headscale? tailscale client side is open source???

This is not trivial to implement, and nobody is being paid to do it. I'm sure we would all like to see app connectors in headscale when someone has time to work on it.

benley avatar Apr 14 '25 16:04 benley

This is not trivial to implement, and nobody is being paid to do it. I'm sure we would all like to see app connectors in headscale when someone has time to work on it.

According to Tailscale, someone is paid to work on headscale. source: https://tailscale.com/blog/opensource

kgncengiz avatar Apr 14 '25 16:04 kgncengiz

@kgncengiz Demanding fixes unfortunately doesn't magically free up developer time, but you know what does speed things up?

Pull Requests.

igrikus avatar Apr 14 '25 18:04 igrikus

i'm a complete beginner to go, but i may throw some time at this because it'd definitely be a useful feature. can't promise anything (as mentioned, complete beginner to go. rust shills like me rarely exit their comfort zone) but yeah, wish me luck :)

mushrowan avatar Nov 05 '25 10:11 mushrowan

I’ve implemented app connector support for the latest version of Headscale. I plan to submit a pull request in a few weeks, once I’ve completed the unit and performance tests.

Beshelmek avatar Nov 06 '25 21:11 Beshelmek