Skip to content

Use Tailscale to build jumper server for other people access one's resources safely

Notifications You must be signed in to change notification settings

gps949/tailscale_jumpserver

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 
 
 

Repository files navigation

tailscale_jumpserver solution

Use Tailscale to build jumper server for other people access one's resources safely.
In this README, let's assume Bob want to access Alice's home local service A.

Step1. Sign up a Tailscale®

Alice should tell Bob to sign up Tailscale®. Bob may use Microsoft® , Goolge or GitHub account to do that.

After this done, Bob can follow Tailscale®'s introduction to install the client software on Bob's device.

Bob can also do that or add more devices later according to the download page.

Step2. Generate AuthKey for the jump server

Bob should generate an Authkey in his Tailscale Settings and offer the key to Alice for jump server using.
("Ephemeral Key" should be ok).
After click the Generate button, it will show the key just generated. Remember to copy it before click th Done button.

Step3. Alice kick-off the jump server with Docker

Alice run below cmd on her prepared Tailscale JumpServer (amd64 host with docker installed). Remeber to replace the "tskey-xxxxxxxx" with the one recieved from Bob in step 2.

docker run -itd --privileged --restart always --name jumpserver_for_bob -e TS_AUTHKEY="tskey-xxxxxxxx" -e SERVER_NAME="alice-service-A" -e JUMP_TARGET="192.168.1.33/32" gps949/tailscale_jumpserver:latest 

After the container run up, Bob should see th jump server on his Tailscale® admin control panel.

Follow the step in above screenshot. (If Bob will only access Alice's service A in 90 days, he can ignore the 2nd step).
After the 3rd step, click the switch to enable all subnet rules.

Step4. Bob can enjoy Alice service A through Tailscale® jump server now!

Bob need to install the Tailscale client on his device first if he didn't do that in Step 2.
Bob should ensure he has already logged in the Tailscale® client and enabled the subnet.

About

Use Tailscale to build jumper server for other people access one's resources safely

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published