search

tailscale / tailscale

The easiest, most secure way to use WireGuard and 2FA.
https://tailscale.com
BSD 3-Clause "New" or "Revised" License
18.79k stars 1.46k forks source link

FR: tailscale NSS module for MagicDNS without DNS? #13544

Open joshtriplett opened 1 week ago

joshtriplett commented 1 week ago

Given the difficulties with integrating MagicDNS and NetworkManager or similar, could tailscale instead provide an NSS module, which directly resolves names through tailscale without using DNS? That would automatically work with applications, bypassing DNS and the user's DNS configuration.

raggi commented 1 week ago

Potentially yes, the challenge/cost with this approach is ensuring that the modules are loadable in all of the target distros. NSS also lacks a solution for network namespaces, and as such we'll need to keep DNS around for a good number of use cases too.

If there are some ongoing integration problems you're having with NetworkManager could you file some details on those too?