Tailscale's simplicity stands out as a key advantage. Our department has several profiles including developers, system architects, and CTOs, which allows us all to work on our own machines. We have a wide variety of people who work with Windows and Linux operating systems, and we can connect to our private network from a terminal. These services are hosted on a data center server and are connected in Docker. Tailscale's wide variety allows us to deploy the services both in Kubernetes clusters and directly on Linux server hosts, as well as in Docker containers, which lets us have a shared resource network without having to create complicated network routing rules. It even allows us to have our own DNS to redirect addresses that we select.
The great ease of being able to interconnect people who might not have a technical profile stands out as an advantage my team gets from using Tailscale for this type of integration and resource management. In the past, we used OpenVPN or Fortinet services, and with just a small installer, it is very easy and simple for employees to use the connection.
The best features that Tailscale offers are ease of use, ease of connection, and a fairly generous connection plan. It allows us to apply ACL policies, which is very beneficial. We do not need to add something extra to define access permissions per user, and that is vital at an organizational level. The console allows you to connect, and there is another interesting feature where you can invite users from other Tailscale networks, which is quite useful.
The ACL is very easy to understand and not as complex as older WireGuard systems. We can create IP ranges or define what kind of people or users can access which resources, which gives us a great deal of peace of mind about our infrastructure.
The most positive impact Tailscale has had on my organization is significant. While working with different providers such as AWS, Azure, or even on-premise, we found that having a single solution to interconnect all those different types of architectures was a complete challenge. Each provider gives its own VPN option, but it is not a scalable, standard, or universal solution. We started using WireGuard to conduct studies of this type, but maintenance became costly, and we always depended on having at least one exposed node to handle the routing or network rules. With Tailscale, the picture changed completely because it allows us, in a simple and native way, to install this type of service, even bypassing complex configurations. We have had situations where we have connection points through CGNAT with 3G routers, and Tailscale provides a solution that is quick, simple, and with very effective speeds, which has pleasantly surprised us.