mirror of
https://github.com/juanfont/headscale.git
synced 2026-01-11 20:00:28 +01:00
add --verify-clients option to embedded DERP server as tailscale derper support it #414
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @heygo1345678 on GitHub (Jan 17, 2023).
Anyone that knows the IP address of your DERP node could add it to their DERP map and route their tailnet traffic through your DERP node. To allow only your tailnet traffic through your DERP node, run tailscaled on the same machine as your DERP node, and start derper with the --verify-clients flag:
sudo derper --hostname=your-hostname.com --verify-clients
@vampywiz17 commented on GitHub (Jan 27, 2023):
https://github.com/juanfont/headscale/issues/740
I think it impact a huge performance problem if that not add it to embedded DERP server.... Please do this.
@juanfont commented on GitHub (Feb 5, 2023):
This is a duplicate of #740