Tailscale and the people building it continue to blow me away. The ingenuity, reliability, polish, and speed of feature delivery are unparalleled in software.
I'm eager to get rid of needing DDNS and open ports just for web hooks. And I can "flatten" my stack by cutting out a reverse proxy / weird port forwarding stuff.
Sure. I don't think tailscale does anything that's impossible through other means (cue comments about how anyone can recreate Dropbox with an FTP server, svn, and a fuse file system). IMO whats great about it is that it's easy to set up and is incredibly low maintenance (at least they way I use it).
Further, and to their credit theres a lot of great tech in there.
Just the other day I stumbled on DERP [1] their wireguard-over-tcp (over their node network) implementation which they fall back to if NAT traversal fails. While sure, this is partly ipv4 problem, it recently helped me connect with friends behind government firewalls, presumably because the packets aren't recognized yet.
But that sort of automated connectivity during nat traversal failure through a global network of edges isn't something you can easily setup yourself (if you care).
The 7% is how often it ends up helping after all the traditional IPv4 traversal tricks.
We race all the options and see which works & is fastest. It's likely it's more like 16% or more (I don't have that number handy) in practice but 7% is just how often it would've not worked at all and had to go to DERP relays if it weren't for IPv6 being an option.
I'm eager to get rid of needing DDNS and open ports just for web hooks. And I can "flatten" my stack by cutting out a reverse proxy / weird port forwarding stuff.