VPN and Tailscale
A recap.
VPNs
- VPN (Virtual Private Network)
- A protected network connection over existing infrastructure, usually the internet. “Virtual” means no dedicated physical connection; “private” means traffic is protected with encryption. It does not inherently mean hiding your IP or changing your location.
- Encrypted tunnel
- Carries traffic securely between endpoints. Observers along the route cannot read its encrypted contents; the endpoints can.
- Work VPN vs. consumer VPN
- A work VPN connects your device to company resources. A consumer VPN routes browsing through a provider’s server; websites see that server’s public IP instead of yours.
Tailscale
- Tailscale
- A mesh VPN connecting authorized devices — laptops, phones, servers — into a private network called a tailnet. Uses WireGuard for encryption.
- Mesh
- Devices connect directly where possible, rather than always through one central VPN server. Tailscale’s coordination service helps establish connections; relays carry encrypted traffic when direct connections fail, without decrypting it.
- Access controls
- Define which users and devices can reach which resources.
- Exit node
- A device selected to route internet traffic. Without one, Tailscale generally leaves ordinary browsing unchanged; with one, browsing exits through that device’s internet connection.
- Scope
- Tailscale supplies connectivity, not file-sharing or remote-desktop functionality. It runs over your existing internet and generally avoids manual router port forwarding or exposing private services publicly.