What is Tailscale SSH? | Tailscale Explained

At Tailscale, we're always adding new features and solving real problems for developers and infrastructure folks alike. In our "Tailscale Explained" series we show you all you need to know to get started on a particular area or feature of Tailscale.

In today's video we cover Tailscale SSH. We'll discuss ACL tags, web console access and more.

===

00:00 - Start
01:29 - Check Mode
02:20 - Web Console
03:45 - ACL Tags
06:48 - Auto Tags with Auth Keys

[russtaylor]

Came here from the excellent Self Hosted podcast, and now a tailscale fan.

[marklee]

Seem to be good attempt to make wireguard connections easier to control and manage.... albeit, still much more complicated that the ZTNA solution I have been using. Full ZTNA solution from Splashtop Secure Workspace, Cloudflare One, Zscaler Private Access seem much easier to manage... some comes w/ built in PAM for privilege injection as well as centralized session recording for compliance. Also had used Foxpass SSH key mgt solution that sync w/ existing IDP in a simple / fast way... take just few minutes to onboard Linux/SSH developers.

[rzvendramini]

CGNAT for meu used to be a pain, but Tailscale made everything so easy. Thank you, guys.

[diedrichg]

This is all too good to be true. I feel like Tailscale is setting us up to be SO reliant on their services that one day they will start requiring a subscription service to then access the indispensable access features that we've setup.

[garylovesbeer]

Perfectly timed. Thank you so much for this. Have a great holiday break.

[dominick]

I tried every other VPN and couldn't get it to work because I have a wireless ISP in the country with CGNAT. Tell scale was pretty much plug and play thank you. 😊

[thewebart]

Alex! Love your videos. I learned so much from you. Thank you.

[patrickhurley]

I would love an extremely indepth tutorial from beginning the download to finish product.

[svenstubes]

I'm not exaggerating when i tell you i love you, and Tailscale. This shit is so fucking cool.

[lars]

Alex, a wish is for you to do an ACL video. 😊 Fx how to let machine A connect to machine B, but machine B can not connect to machine A.

[__Doug__]

I swear that this is MAGIC! Thank you Alex.

[SB-qmwg]

Does enabling tailscale SSH on the server make any changes on the same tailscale SSH server using NON-tailscale connections (local vlan)? I'm amazed the TS ACLs are applied so seamlessly. I've been using SSH for 3 decades and this set-up looks like magic to me 🧙. I'm assuming default port [22] has to be allowed in the local machine firewall (if enabled) for the tun interface. I'm used to doing all this in the sshd_config, ufw, etc

[softlution]

Hi there. Thanks for the video. I've been pulling my hair out for the last 3 days trying to connect to my Proxmox Tailscale container through Github Runner and then SSH to other Proxmox VMs and hosts through my Github workflow. I can successfully connect to the Tailscale container, but I cannot connect to other VMs and hosts via SSH. The latest error I'm encountering is "Pseudo-terminal will not be allocated because stdin is not a terminal." I've tried modifying the command with -t, -tt, and -T, but no luck. Also, it would be helpful to know that SSH is disabled by default in Tailscale connections.

[renobodyrenobody]

Excellent, brillant, marvelous... I am speechless, it is so good. Thanks a lot!

[JamesTenniswood]

Really interesting video. I never knew it had all these capabilities

[PizzaGoat]

Great video. Can you do one with magic dns?

[JimBLogic]

My access controls doesn't have a "checkPeriod" line, is it safe to add it manually?

[astral]

I checked the pricing page on Tailscale and it lists Tailscale SSH in Premium. This means that it isn't available on the free tier, right?

[needMoreInput]

Thanks Alex. Love the podcast too! Keep the tuts comin'!

[foryoutubeyoutube]

Hi Alex,

Pls let me know how I can access my network drive that I attached to glinet router outside of my network

Thank you!!