- Static public IP addresses for ingress cost money from the cloud provider, they're not cheap either
- Having a public IP makes the ports open to attackers, using Tailscale the attacker has to hack your tailnet before they can hack your server
- You have to buy a DNS name for your public IP, you don't need one if you use Tailscale thanks to MagicDNS
- Tailscale has a bunch of nice features like Let's Encrypt integration, OAuth support, Tailscale SSH, etc. that make the experience quite nice overall
- Lots of ISPs use CGNAT which means you can't always have direct access, especially on mobile. Tailscale solves that via DERP (https://tailscale.com/docs/reference/derp-servers)
- Static public IP addresses for ingress cost money from the cloud provider, they're not cheap either
- Having a public IP makes the ports open to attackers, using Tailscale the attacker has to hack your tailnet before they can hack your server
- You have to buy a DNS name for your public IP, you don't need one if you use Tailscale thanks to MagicDNS
- Tailscale has a bunch of nice features like Let's Encrypt integration, OAuth support, Tailscale SSH, etc. that make the experience quite nice overall