If someone pointedly asked me this in a meeting, my off the cuff response would be "bastion hosts, probably".
if the named service completely integrates with whatever access control a company uses (radius, SAP, whatever) then there shouldn't be any reason to not use this in lieu of concentrators. At least you lose that bottleneck and point of failure. For larger and more geographically disparate companies, i could see this being an even better proposition, but only because this is merely the second time i've seen tailscale at all.
All i know is i've used wireguard recently, and it took me a few tries to get it to do what i wanted. a decade ago i was trying to get some corporate VPN software working on Gentoo, and i managed to cobble enough correct settings to get it working, too. I don't wish that on any user.
I loathe setting up a dialer to connect to a VPN, and even worse is the 3rd party app "ssl VPN" junk - most of the ones we've tried just lose settings on my computers, to the point where dark fiber seems like a better investment of my time.
if the named service completely integrates with whatever access control a company uses (radius, SAP, whatever) then there shouldn't be any reason to not use this in lieu of concentrators. At least you lose that bottleneck and point of failure. For larger and more geographically disparate companies, i could see this being an even better proposition, but only because this is merely the second time i've seen tailscale at all.
All i know is i've used wireguard recently, and it took me a few tries to get it to do what i wanted. a decade ago i was trying to get some corporate VPN software working on Gentoo, and i managed to cobble enough correct settings to get it working, too. I don't wish that on any user.
I loathe setting up a dialer to connect to a VPN, and even worse is the 3rd party app "ssl VPN" junk - most of the ones we've tried just lose settings on my computers, to the point where dark fiber seems like a better investment of my time.