How Tailscale works

People often ask us for an overview of how Tailscale works. We’ve been putting off answering that, because we kept changing it! But now things have started to settle down. Let’s go through the entire Tailscale system from bottom to top, the same way we built it (but skipping some zigzags we took along the way). With this information, you should be able to build your own Tailscale replacement… exce

[proxy0721]

P2Pのmesh network、subnet routerは従来のhub and spoke型、FirewallやNAT越え、data planeはWireGuard、coodination server上にpublic key、各ノード上にprivate key、アカウント認証は外部サービス、通信の認可はACL

[Listlessness]

WireGuardは公開鍵暗号で、Talescaleは公開鍵のやり取りを容易にするサービスだというざっくりとした理解でええじゃろか