
The Changelog: Software Development, Open Source
From Tailnet to platform (Interview)
March 11 · 1 hr 42 min · 147.4 MB
0:00-1:42:15
Streams straight from the publisher. PodNod never proxies or re-hosts episode audio.
Adam talks with Tailscale co-founder and Chief Strategy Officer David Carney about where Tailscale is headed next: TSIDP, TSNet, multiple tailnets, and Aperture. They get into clickless auth (via TSIDP), TSNet apps, multiple tailnets for isolation and control, and Aperture, Tailscale’s private AI gateway for API key management, observability, and agent security.
Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code
changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog - Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code
CHANGELOGto save 10% on your first website purchase. - Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Send an email to David ~> aperture@tailscale.com
Mentioned in this episode
- Tailscale
- Aperture by Tailscale
- TSIDP
- TSNet
- Multiple tailnets
- Tailnet policy file syntax
- Model Context Protocol (MCP)
- MCP specification
- Proxmox VE
- Incus
- OIDC / OpenID Connect
- OAuth 2.0
- Okta
- Microsoft Entra ID
- Google Workspace
- Keycloak
- Salesforce
- Anthropic
- Amazon Bedrock
- Oso
- Cerbos
- Go
- GopherCon
- Simon Willison
Something missing or broken? PRs welcome!
Join the discussion
changelog.zulipchat.comChangelog++
changelog.comAugment Code
augmentcode.comNordLayer
nordlayer.comSquarespace
squarespace.comFly.io
fly.ioCheck out the speedrun
fly.ioWebsite
tailscale.comGitHub
github.comX
x.comWebsite
adamstacoviak.comGitHub
github.comLinkedIn
linkedin.comMastodon
changelog.socialX
x.comTailscale
tailscale.comAperture by Tailscale
aperture.tailscale.comTSIDP
github.comTSNet
tailscale.comMultiple tailnets
tailscale.comTailnet policy file syntax
tailscale.comModel Context Protocol (MCP)
modelcontextprotocol.ioMCP specification
modelcontextprotocol.ioProxmox VE
proxmox.comIncus
linuxcontainers.orgOIDC / OpenID Connect
openid.netOAuth 2.0
oauth.netOkta
okta.comMicrosoft Entra ID
microsoft.comGoogle Workspace
workspace.google.comKeycloak
keycloak.orgSalesforce
salesforce.comAnthropic
anthropic.comAmazon Bedrock
aws.amazon.comOso
osohq.comCerbos
cerbos.devGo
go.devGopherCon
gophercon.comSimon Willison
simonwillison.netPRs welcome!
github.com
- 0:00This is The Changelog!
- 0:52Sponsor: Augment Code
- 3:50Welcome David Carney
- 4:48What is Tailscale?
- 7:41Products on top (like tsidp)
- 11:05Be your own OIDC
- 12:52Clickless login
- 13:58Using tsidp in the homelab or on-prem?
- 17:08Tailscale is cool and under-known
- 19:29tsidp, MCP, dynamic client registration
- 22:23Dynamic client registration
- 26:19Why not be an IdP?
- 27:21Self-hosting for my IdP
- 31:13Sponsor: NordLayer
- 33:05Aperture is front and center
- 39:48Cloud Aperture vs self-hosted?
- 48:41Cloud-first for velocity
- 50:47Building on tsnet (Tailscale platform)
- 53:39Network isolation
- 59:28Sponsor: Squarespace
- 1:01:35Give us some ideas
- 1:04:44Multi-tailnet !!?
- 1:09:09Aperture as AI gateway/firewall
- 1:19:11Partner with Taiscale on Aperture
- 1:20:45Is this big bother?
- 1:30:12What's next?
- 1:36:03Show off your cool stuff
- 1:37:41Wrapping up
- 1:40:33End of show.