bradfitz

Joined 15 years ago

Karma

5,568

Submissions

489

Member since

Jan 29

https://bradfitz.com/

Made LiveJournal, OpenID, memcached, etc.

12+ years at Google (Social, Android performance, 10+ years on Go),

Now Tailscale since Jan 2020

View on Hacker News

Recent submissions

Comment · 4 days ago

(Tailscalar)

FWIW you can rebuild tailscaled to omit all the optional stuff:

https://github.com/tailscale/tailscale/tree/main/feature#mod...

e.g.

  % go run ./cmd/featuretags --min
  ts_omit_ace,ts_omit_acme,ts_omit_advertiseexitnode,ts_omit_advertiseroutes,ts_omit_androidbin,ts_omit_androiddns,ts_omit_appconnectors,ts_omit_aws,ts_omit_bakedroots,ts_omit_bird,ts_omit_c2n,ts_omit_cachenetmap,ts_omit_captiveportal,ts_omit_capture,ts_omit_cliconndiag,ts_omit_clientmetrics,ts_omit_clientupdate,ts_omit_cloud,ts_omit_colorable,ts_omit_completion,ts_omit_completion_scripts,ts_omit_conn25,ts_omit_connreject,ts_omit_dbus,ts_omit_debug,ts_omit_debugeventbus,ts_omit_debugportmapper,ts_omit_desktop_sessions,ts_omit_dns,ts_omit_dnsresolvecache,ts_omit_doctor,ts_omit_drive,ts_omit_exitnodehealth,ts_omit_favorites,ts_omit_flashappliance,ts_omit_gro,ts_omit_health,ts_omit_hujsonconf,ts_omit_identityfederation,ts_omit_ipnbus,ts_omit_iptables,ts_omit_kube,ts_omit_linkspeed,ts_omit_linuxdnsfight,ts_omit_listenrawdisco,ts_omit_logtail,ts_omit_nattraversal,ts_omit_netlog,ts_omit_netstack,ts_omit_networkmanager,ts_omit_oauthkey,ts_omit_osrouter,ts_omit_outboundproxy,ts_omit_peerapiclient,ts_omit_peerapiserver,ts_omit_portlist,ts_omit_portmapper,ts_omit_posture,ts_omit_qrcodes,ts_omit_relayserver,ts_omit_remoteconfig,ts_omit_resolved,ts_omit_routecheck,ts_omit_runtimemetrics,ts_omit_sdnotify,ts_omit_serve,ts_omit_serviceclientprefs,ts_omit_ssh,ts_omit_synology,ts_omit_syslog,ts_omit_syspolicy,ts_omit_systray,ts_omit_taildrop,ts_omit_tailnetlock,ts_omit_tap,ts_omit_tpm,ts_omit_tundevstats,ts_omit_udptransport,ts_omit_unixsocketidentity,ts_omit_useexitnode,ts_omit_useproxy,ts_omit_usermetrics,ts_omit_useroutes,ts_omit_wakeonlan,ts_omit_webbrowser,ts_omit_webclient

Comment · 1 month ago

This is not realistic; the start menu opens way too quickly.

Comment · 1 month ago

They started off as a Kickstarter thing and had stock issues in previous rounds too.

Comment · 1 month ago

I heard that the reason the major car companies started to sour on CarPlay was because Apple started to get increasingly needy with their data collection requirements (as of CarPlay Ultra) and the car companies weren't comfortable (or legally able) to give Apple that much canbus/telemetry data. And I guess Apple was pushing CarPlay Ultra as the only option without classic less-data-snoopy CarPlay?

Comment · 2 months ago

Last I checked, VPN network extensions wouldn't run in the simulator.

Comment · 2 months ago

Yes, it's been our CEO Avery's position for ~6.5 years now that we should run DERP servers on the internet for the public good. (rate-limited)

But these are a separate fleet (https://tailcat.dev/derpmap.json) separate from our usual ones, and not using "tailscale.com" in DNS or SNI anywhere.

Comment · 2 months ago

One fun use case: a coworker just whipped up this Minecraft mod using tailcat as its transport: https://github.com/tailscale/tailcat-for-minecraft

(just a cute demo, not intended for release or ongoing maintenance)

Comment · 2 months ago

There's an example in the README how to do exactly that :)

Comment · 2 months ago

It's not our standard dev environment but some of us use Nix. We don't really use Docker much, though. Mostly just "go test" etc.

Comment · 2 months ago

Same.

But Tailscale keeps sucking me in with new stuff to do. :(

Comment · 2 months ago

Still working on Go's http2 10 years later :)

Recently: https://github.com/golang/go/commit/128a36cf0367c46daff2528d...

https://github.com/golang/go/commit/3c0665e551be23e62167f625...

Comment · 2 months ago

(Author here)

WireGuard doesn't do NAT traversal. That's the main thing this adds. And this also adds a CLI tool + library to do streams over WireGuard w/o installing kernel routings, requiring root, etc.

Comment · 2 months ago

(Author here)

There's no vendor lock-in here and no payment or account required. If Tailscale as a company fails, tailcat keeps working if you run your own DERP server. It's just open source code, not a hosted service.

Comment · 2 months ago

(Author here)

The DERP server is already open source and tailcat can use any DERP server you run: https://github.com/tailscale/tailscale/tree/main/cmd/derper#...

We just provide some default ones (https://tailcat.dev/derpmap.json) to get started if you're not bandwidth-sensitive. But you don't have to use them.

Update: I added more explicit docs about this to https://github.com/tailscale/tailcat#bring-your-own-derp-rel...

Comment · 2 months ago

Oh? I thought we added that option on iOS recently. I'll go check.