# Blog on Tailscale Recent blog posts from Tailscale This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Your built-in router VPN might be more trouble than it's worth DevFeed: [Your built-in router VPN might be more trouble than it's worth]() Original publisher: [Read original article]() Author: Andrew Cunningham Published: 2026-09-11T16:00:00Z Content type: opinion Language: en Sources: [Blog on Tailscale]() Topics: [networking](), [Networks](), [Server](), [Hardware]() Tags: [nas](), [networks](), [performance](), [routing](), [security](), [server]() ### AI overview The article argues that built-in VPN servers on routers and NAS devices can be unreliable and difficult to use, especially on restrictive networks. It presents Tailscale as a better option for addressing those connection limitations. ### Source excerpt Built-in VPNs are easy to start--then harder to live with. ## Tailscale Kubernetes Operator 1.102: In-cluster Peer Relays, better IPv6, and optimized certificates DevFeed: [Tailscale Kubernetes Operator 1.102: In-cluster Peer Relays, better IPv6, and optimized certificates]() Original publisher: [Read original article]() Author: Mike Stefaniak Published: 2026-09-09T14:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [Kubernetes](), [networking](), [VPC]() Tags: [kubernetes](), [networks](), [release](), [routing](), [vpc]() ### AI overview Tailscale Kubernetes Operator 1.102 adds in-cluster peer relays, improves IPv6 connectivity support, and reduces certificate-related deployment and connectivity issues. ### Source excerpt Faster cross-cluster connections, fewer IPv6 dead ends, less certificate churn. ## Build with Tailscale. Build on Tailscale. DevFeed: [Build with Tailscale. Build on Tailscale.]() Original publisher: [Read original article]() Author: Kevin Purdy Published: 2026-08-31T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [networking](), [Local AI](), [Go](), [App](), [ide]() Tags: [apis](), [applications](), [dev](), [go](), [local](), [local-ai](), [networking](), [server](), [software]() ### AI overview Tailscale describes two ways to build with its networking platform: embedding secure, identity-aware connectivity into applications with tsnet, and automating tailnet creation and management through APIs. A local Ollama server illustrates how application-level identities, ACLs, MagicDNS, and managed HTTPS can avoid public ports, host daemons, and manual proxy configuration. ### Source excerpt Put secure networking inside what you build, then automate the rest. ## Tailcat: Tailscale without Tailscale, by Tailscale DevFeed: [Tailcat: Tailscale without Tailscale, by Tailscale]() Original publisher: [Read original article]() Author: Brad Fitzpatrick Published: 2026-08-31T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [Go Language](), [Command-line interface](), [Open Source](), [client](), [Encryption](), [Server](), [Security](), [Linux](), [Android](), [Single sign-on (SSO)]() Tags: [android](), [cli](), [encryption](), [go](), [identity](), [linux](), [open-source](), [remix](), [security]() ### AI overview Tailcat is an open-source Go package and CLI that uses Tailscale's data plane--WireGuard encryption, NAT traversal, and DERP--to provide netcat-like client and server connectivity without the Tailscale control plane, accounts, or administrative controls. ### Source excerpt A netcat-ish way to use Tailscale's data plane without its control plane ## Introducing DNS filtering by Control D DevFeed: [Introducing DNS filtering by Control D]() Original publisher: [Read original article]() Author: Kabir Sikand Published: 2026-08-28T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [Security](), [Malware](), [API](), [dashboards](), [Serverless]() Tags: [api](), [devices](), [infrastructure](), [malware](), [security](), [serverless]() ### AI overview Tailscale introduces a Control D DNS filtering integration that lets organizations apply per-group or per-device rules through Tailscale ACLs. Control D filters malicious, phishing, unwanted, and suspicious destinations using threat feeds, domain and IP detection, machine learning, managed lists, and custom rules. ### Source excerpt Just-in-time access, resource policies, and session auditing ## Tailscale PAM beta: Manage connectivity and privileged access in one place DevFeed: [Tailscale PAM beta: Manage connectivity and privileged access in one place]() Original publisher: [Read original article]() Author: Smriti Sharma Published: 2026-08-27T14:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [Authorization](), [Security](), [Kubernetes](), [OpenSSH](), [API](), [Databases](), [web applications](), [incident]() Tags: [api](), [compliance](), [databases](), [external](), [identity](), [incident](), [infrastructure](), [kubernetes](), [logs](), [production](), [security](), [servers](), [slack](), [ssh](), [web-applications]() ### AI overview Tailscale PAM beta brings privileged access management into the Tailscale admin console. It provides resource-specific access policies, just-in-time approvals through Slack, and session logs and recordings for audits and investigations across databases, servers, Kubernetes clusters, and web applications. ### Source excerpt Just-in-time access, resource policies, and session auditing, right where you need them. ## Aperture GA: Building a home(lab) for agentic AI DevFeed: [Aperture GA: Building a home(lab) for agentic AI]() Original publisher: [Read original article]() Author: Remy Guercio Published: 2026-08-26T16:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [AI Bots](), [AI Chat]() Tags: [agentic-ai](), [agents](), [ai](), [announcement](), [api-keys](), [homelab](), [llm](), [mcp](), [model-context-protocol](), [models](), [networking](), [ssh]() ### AI overview Tailscale announces Aperture's general availability, adding purchasable model tokens, an upgraded chat experience, and MCP endpoints for managing tailnets and accessing nodes with Tailscale SSH. ### Source excerpt Adding model tokens, chat Projects, MCP controls, and more. ## The TailscaleUp-date DevFeed: [The TailscaleUp-date]() Original publisher: [Read original article]() Author: Ross Kukulinski Published: 2026-08-24T14:30:00Z Content type: news Language: en Sources: [Blog on Tailscale]() Topics: [networking](), [AI Bots](), [Network architectures]() Tags: [ai](), [ai-agent](), [ai-gateway](), [api](), [api-keys](), [automation](), [databases](), [event](), [identity](), [infrastructure](), [logs](), [networking](), [security]() ### AI overview Tailscale previews TailscaleUp announcements focused on secure, identity-based connectivity and governed access for AI systems, services, and sensitive infrastructure. ### Source excerpt A preview of what we're building--and what we'll share at TailscaleUp. ## How we tracked down a 16-year-old SQLite bug DevFeed: [How we tracked down a 16-year-old SQLite bug]() Original publisher: [Read original article]() Author: Alex Chan Published: 2026-08-12T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [SQLite](), [bug](), [Databases](), [incident](), [Go Language](), [Amazon S3](), [data]() Tags: [blog](), [bug](), [data](), [database](), [databases](), [go](), [incident](), [s3](), [sqlite]() ### AI overview Tailscale describes how repeated outages led its engineers to track down and fix a long-standing SQLite corruption bug. The article covers the control plane's sharded, single-writer SQLite architecture, database backups uploaded to Amazon S3, and the forensic investigation into recurring corruption. ### Source excerpt SQLite corruption? Sorted. ## How Tailscale mitigates the lethal trifecta DevFeed: [How Tailscale mitigates the lethal trifecta]() Original publisher: [Read original article]() Author: Remy Guercio, Andrew Dunham Published: 2026-08-06T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [AI Bots](), [Language models](), [Vulnerabilities]() Tags: [agentic](), [agents](), [ai](), [ai-agents](), [language-models](), [vulnerabilities]() ### AI overview The article explains the "lethal trifecta" in AI agents: private-data access, exposure to untrusted content, and external communication. It describes the security trade-offs between unrestricted agents, overly limited systems, and repeated approval prompts. ### Source excerpt Keep AI agents useful without combining their riskiest capabilities. ## Tailscale didn't stop the Hugging Face intrusion DevFeed: [Tailscale didn't stop the Hugging Face intrusion]() Original publisher: [Read original article]() Author: Avery Pennarun Published: 2026-07-31T18:30:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [incident](), [AI Bots](), [Vulnerabilities]() Tags: [ai-agent](), [benchmark](), [hugging-face](), [incident](), [kubernetes](), [post-mortem](), [sandbox](), [security]() ### AI overview Tailscale examines the Hugging Face intrusion involving an escaped AI agent, arguing that no Tailscale vulnerability was exploited but that credential controls should have limited the attacker's lateral movement. ### Source excerpt Tailscale wasn't exploited. We still should have stopped the intrusion. ## Engineering quality compounds DevFeed: [Engineering quality compounds]() Original publisher: [Read original article]() Author: Mike Shaver, Avery Pennarun Published: 2026-07-21T13:00:00Z Content type: news Language: en Sources: [Blog on Tailscale]() Topics: [engineering-leadership](), [Architecture & Design](), [Firefox](), [systems](), [JIT](), [Linux](), [JavaScript](), [Security](), [Shopify]() Tags: [developer](), [engineering](), [engineering-leadership](), [firefox](), [javascript](), [jit](), [linux](), [news](), [platform](), [security](), [shopify](), [systems]() ### AI overview Mike Shaver joins Tailscale as VP of Engineering, bringing experience in platform engineering, Firefox, Facebook's mobile transition, security products, systems programming, and edge infrastructure. The article frames his role around scaling engineering quality while keeping Tailscale's product reliable, useful, and understandable. ### Source excerpt Mike Shaver joins Tailscale to scale engineering quality. ## What a $20 coding subscription actually buys DevFeed: [What a $20 coding subscription actually buys]() Original publisher: [Read original article]() Author: Kevin Purdy Published: 2026-07-17T16:00:00Z Content type: tutorial Language: en Sources: [Blog on Tailscale]() Topics: [AI Chat]() Tags: [agentic-coding](), [ai](), [llm](), [openai]() ### AI overview A guide to using Tailscale Aperture with Claude Code or ChatGPT/Codex subscriptions to track token costs and manage access. ### Source excerpt Someone's subsidizing your coding agent. Aperture shows whether it's you. ## Remotely access Home Assistant via Tailscale for free DevFeed: [Remotely access Home Assistant via Tailscale for free]() Original publisher: [Read original article]() Author: Kevin Purdy Published: 2026-07-16T20:00:00Z Content type: tutorial Language: en Sources: [Blog on Tailscale]() Topics: [Home Assistant]() Tags: [app](), [devices](), [dns](), [open-source](), [remote](), [tutorial](), [update](), [video](), [web]() ### AI overview A tutorial for installing and configuring the Tailscale app in Home Assistant to enable remote access to home controls and dashboards without opening ports or setting up proxies. ### Source excerpt Take Home Assistant beyond your home network with Tailscale. ## How to audit what your AI agents are accessing DevFeed: [How to audit what your AI agents are accessing]() Original publisher: [Read original article]() Author: Kevin Purdy Published: 2026-06-30T14:00:00Z Content type: article Language: en Sources: [Blog on Tailscale]() Topics: [AI Agent](), [audit trail](), [data](), [dashboards]() Tags: [agent](), [agents](), [ai](), [ai-agents](), [audit-trail]() ### AI overview This article explains how Aperture helps teams audit AI-agent activity. It describes identity-based request attribution, session tracking, request and response capture, tool-use visibility, token and model metadata, retention controls, and asynchronous logging for LLM interactions. ### Source excerpt AI agents do a lot. Aperture keeps the audit trail.