Tailscale Services

Tailscale Services: Fans cheer, skeptics ask “Funnel 2.0?” while builders want catch‑all names

TLDR: Tailscale launched Services, giving apps stable private addresses and readable names without complex setup. Comments range from cheers to questions—some ask if it replaces Funnel, others want catch‑all names—while homelabbers celebrate fewer port numbers and teams eye easy automation, making secure access simpler for everyone.

Tailscale just dropped “Services,” a way to give your apps a stable number and easy name—think a phone number plus a contact name—so teammates can reach stuff without wrestling messy network settings. It can even route between multiple machines, hinting at a quiet “goodbye” to old-school load balancers. Cue the confetti… and the comment chaos. One camp is pure hype: “Fantastic. So many possibilities,” gushes a fan. Another camp instantly asks for power features: defnnn wants “wildcard” names (catch‑all addresses like anything.foo.example) to play nice with front-door traffic tools. And the big confusion moment? setheron asks if this is just a stronger version of Tailscale’s “Funnel” (their tool for safely sharing things to the public internet). The vibe: excitement meets “wait, what exactly is this?”

Newcomers admitted the docs helped unlock it—peter_d_sherman had an “Ah! OK, now I get it!” after reading how Tailscale works. Meanwhile, homelab heroes like TranquilMarmot are ready to ditch memorized port numbers and slap human‑readable names on their photo servers and code forges. Dev teams love the API angle too: spin services up for testing, tear them down when done—robots do the cabling so humans ship features. The only drama? Feature requests vs. day‑one reality, plus the eternal “is this a load balancer killer?” debate. Internet, do your thing.

Key Points

  • Tailscale launched Tailscale Services to define logical resources with stable addresses and names for granular access control.
  • Services receive virtual IPv4/IPv6 TailVIPs and a unique MagicDNS name, and can be fully managed via API.
  • A service can map to one or many Tailscale nodes, enabling intelligent routing and potentially replacing traditional load balancers.
  • Service hosts (Tailscale clients) advertise endpoints; configuration is declarative or via the tailscale serve subcommand, with validations for active status.
  • Pilot users applied Services for workload connectivity, developer tooling, internal apps, identity-aware proxies, secret stores, MCP servers, and telemetry/logging gateways.

Hottest takes

“Is this like a more robust funnel?” — setheron
“This would be great if it supported wildcards...” — defnnn
“Fantastic. So many posibilities” — rhjensen79
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.