tailscale
gcp-dhcp-takeover-code-exec
Our great sponsors
| tailscale | gcp-dhcp-takeover-code-exec | |
|---|---|---|
| 1005 | 12 | |
| 16,315 | 529 | |
| 4.8% | - | |
| 9.9 | 0.0 | |
| 3 days ago | over 2 years ago | |
| Go | Go | |
| BSD 3-clause "New" or "Revised" License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
tailscale
-
Building a Managed Service Provider Business With Open Source
Tailscale
- Home Lab Guide
-
🛡️4 Top Database Security Tools in 2024 🏆🔥
Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard® protocol, which means only devices on your private network can communicate with each other.
-
Apple Announces Changes to iOS, Safari, and the App Store in the European Union
Might be possible to do using a VPN as long as you can get broadcast/multicast packets forwarded.
Tailscale unfortunately doesn't support it...yet?
-
GitHub issues from top Open Source Golang Repositories that you should contribute to
Tailscale - Make depaware output patch compatible
-
Network setup for remote access
Tailscale https://tailscale.com
-
A word of caution about Tailscale
It's a feature of the client, and that is open source: https://github.com/tailscale/tailscale
-
Connecting several hundreds IoT (raspberry pi's) devices with a VPN
My plan is to set up an EC2 instance and host a VPN, considering options like Netmaker, OpenVPN, or Tailscale. The goal is to connect these devices to the VPN, enabling SSH access from any connected node. This method seems cost-effective(Considering I want to use 100s of devices and potentially 1000s) and straightforward, requiring a simple setup with a sudo apt command on the Raspberry Pi.
-
The Tailscale Universal Docker Mod
It's likely just `tailscale serve https / `.
https://github.com/tailscale/tailscale/blob/main/ipn/serve.g...
And they also support direct embedding:
https://tailscale.dev/blog/embedded-funnel
I think this is built on the wireguard-go + gvisor mashup, that allows you to do this with just Wireguard:
https://github.com/WireGuard/wireguard-go/tree/master/tun/ne...
One of my favorite applications of this is this little tool that turns Wireguard VPNs into SOCKS5 proxies (which you can selectively enable in your browser)
-
Tailscale Kubernetes Operator
I agree, it's a feature that I find sorely lacking in my tailnet.
These are the relevant Github issues to follow, hopefully they address these someday:
gcp-dhcp-takeover-code-exec
-
Hacker News top posts: Jun 29, 2021
Google Compute Engine VM takeover via DHCP flood\ (59 comments)
-
Google Compute Engine (GCE) VM Takeover via DHCP Flood
He reported the issue first on 2020-09-26 [0], nearly a year ago.
[0] https://github.com/irsl/gcp-dhcp-takeover-code-exec#timeline
Same subnet = as another VM in your project? or random GCP user? Seems like pretty different risk levels...
https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-s...
What are some alternatives?
headscale - An open source, self-hosted implementation of the Tailscale control server
Netmaker - Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
netbird - Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.
ZeroTier - A Smart Ethernet Switch for Earth
pivpn - The Simplest VPN installer, designed for Raspberry Pi
Nebula - A scalable overlay networking tool with a focus on performance, simplicity and security
mistborn
traefik - The Cloud Native Application Proxy
OpenVPN - OpenVPN is an open source VPN daemon
frp - A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
cloudflared - Cloudflare Tunnel client (formerly Argo Tunnel)
innernet - A private network system that uses WireGuard under the hood.