←back to thread

I finally understand Cloudflare Zero Trust tunnels

(david.coffee)
311 points eustoria | 1 comments | 16 Nov 25 17:39 UTC | HN request time: 0.196s | source
Show context
plantinthebok ◴[16 Nov 25 19:52 UTC] No.45947870[source]▶
What's the actual win here? Avoiding relay latency in the rare cases Tailscale can't punch through NAT? If that's it, a $3 VPS running Headscale seems simpler. The complexity feels like you're optimizing for the 5% case while adding permanent vendor lock in. What am I missing?
replies(6): >>45947999 #>>45948012 #>>45948016 #>>45948087 #>>45948806 #>>45952600 #
1. throwaway678339 ◴[16 Nov 25 20:09 UTC] No.45947999[source]▶
I don't think you are missing anything. They have a bunch of half baked features like this that aren't as robust as real security vendors and lock you in just like you said.