| ▲ | boomer_joe an hour ago | |
Yes. Just fucking stop doing userspace wireguard on linux https://github.com/tailscale/tailscale/issues/426 - issue has been open for 6 years (and is locked now, lol), btw. And if any tailscale employees are reading this - https://github.com/tailscale/tailscale/issues/15724 please fix this too. Regular users not using some sort of enterprise saas DNS (whatever their thing is?) deserve DNS privacy too. | ||
| ▲ | apenwarr a minute ago | parent | next [-] | |
(Tailscale cofounder) That’s a good callout on DoH support, thanks. That said, note that if you run your own DNS server on your tailnet, the regular UDP DNS is automatically private because it’s carried over Tailscale. That’s the most common setup for non-SaaS DNS servers. DoH doesn’t really add anything in that arrangement. | ||
| ▲ | iscoelho 36 minutes ago | parent | prev [-] | |
Tailscale's netstack is barely even WireGuard and they aren't compatible whatsoever. It's all marketing at this point. So it's not that simple: it's impossible for Tailscale to use any existing kernel or accelerated WireGuard implementation. They could derive inspiration, but a kernel module for Linux won't fix Windows & Mac. With that said, I feel they have enough funding to maintain a few platforms (: | ||