Tailscale's NAT Traversal: A Deep Dive

2025-01-05
Tailscale's NAT Traversal: A Deep Dive

This Tailscale blog post details how their VPN overcomes the challenges of NAT (Network Address Translation) to enable direct device-to-device connections. It explains NAT's workings and various techniques to handle NAT and firewalls, including STUN for discovering public IPs, the birthday paradox for faster port probing, and DERP as a fallback relay. Finally, it introduces the ICE protocol, which automatically tries various methods, selecting the best connection to ensure reliable connectivity.

Read more
Development

Tailscale Subnet Routers: A Simple Solution for Complex Network Connections

2024-12-14
Tailscale Subnet Routers: A Simple Solution for Complex Network Connections

Tailscale typically requires installing a client on every device, but this isn't always feasible for embedded devices or existing VPCs. That's where subnet routers come in. They enable devices to communicate using Tailscale's powerful NAT traversal technology, regardless of whether they're running Tailscale. This article explains how Tailscale subnet routers work, including installation and configuration on Windows and Linux. For large network migrations or connecting AWS VPCs, subnet routers offer a fast and easy way to get started. Personal use is free and doesn't count against device limits.

Read more