Embed Notice

@badnetmask
Depending on how you use it, it can be a step towards Zero Trust networking, where being physically on the LAN doesn't automatically give you access to things. If you bind services to the Tailnet interface instead, then it doesn't matter where you are, you can only access it if allowed by the ACL. It also acts as encryption in transit for all traffic, even plaintext protocols.