Tailscale SSH

• https://tailscale.com/kb/1193/tailscale-ssh

tailscale up --ssh

Official example

{
	"acls": [
		{
			"action": "accept",
			"src": ["*"],
			"dst": ["*:*"]
		}
	],
	"ssh": [
		{
			"action": "accept",
			"src": ["autogroup:member"],
			"dst": ["autogroup:self"],
			"users": ["root", "autogroup:nonroot"]
		},
		{
			"action": "accept",
			"src": ["autogroup:member"],
			"dst": ["tag:prod"],
			"users": ["root", "autogroup:nonroot"]
		},
		{
			"action": "accept",
			"src": ["tag:logging"],
			"dst": ["tag:prod"],
			"users": ["root", "autogroup:nonroot"]
		}
	]
}

See also

• Tailscale 41641, SD-WAN, tailscale login, status | tailscale --help ], ts.net, Tailscale SSH, Encrypted TCP relays (DERP), Terraform Tailscale, Headscale, MagicDNS, logtail, Troubleshooting tailscale, Subnet routers, Tailscale coordination server