buildOne report1 publisher Two properties shipped on June 3 remove the enrollment step and the synchronous wait that kept UDP and device provisioning off serverless AWS.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence55
buildOne report1 publisher Judge Barlow blocked Utah's SB73 after finding sites cannot perfectly geolocate VPN users, a gap Aylo says covers all 28 million of its US users. The preliminary order turns on what a network connection can reveal, and document-based age checks are the compliance path that still works over a VPN.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence35
buildOne report1 publisher One Oracle micro VM held Pi-hole, the exit node and the tailnet's only resolver. When its node key came due at 180 days, both clients lost name resolution and every admin path into the box was already closed.
Reality
- Evidence62
- Adoption14
- Hype gap−8
- Incentives25
- Confidence58
buildOne report1 publisher A practitioner's production setup keeps the entire trust model in /etc/wireguard/wg0.conf. The line counts he leans on put WireGuard at about 6 percent of OpenVPN's core daemon, and the speed claim comes without a test.
Reality
- Evidence45
- Adoption30
- Hype gap+25
- Incentives30
- Confidence55
buildOne report1 publisher The open-source data plane does encryption and NAT traversal in userspace with no root and no TUN device, and it stops exactly where identity, policy and reliable relays begin. That boundary is now the buy decision.
Reality
- Evidence55
- Adoption15
- Hype gap+18
- Incentives78
- Confidence52
buildOne report1 publisher Putting sshd on a WireGuard tailnet and deleting the public firewall rule is a twenty-minute change. The part worth reviewing is the admin-console toggle that keeps a headless box from logging itself out.
Reality
- Evidence46
- Adoption
- Insufficient
- Hype gap+8
- Incentives34
- Confidence52
buildOne report1 publisher A page-size mismatch between Chromium and a Raspberry Pi kernel made the sandbox the only way to run the job at all. The isolation it buys is real, and narrower than the word suggests.
Reality
- Evidence42
- Adoption14
- Hype gap−8
- Incentives18
- Confidence38
buildOne report1 publisher Tailscale logged 19 corrupted shard databases in six months, and the first alarm came from a pipeline reading its S3 backups. Using SQLite correctly did not bound the failure.
Publishers:tailscale.com
Reality
- Evidence66
- Adoption58
- Hype gap+14
- Incentives78
- Confidence62
buildOne report1 publisher The standard --tun=userspace-networking advice produces a tailnet member you cannot SSH into. The repair is two lines of container config, not a privileged container.
Reality
- Evidence52
- Adoption
- Insufficient
- Hype gap+14
- Incentives30
- Confidence55