Hello.
I have read the acl examples here https://tailscale.com/kb/1018/acls#hosts
but I don’t understand how to easy declare that only host1 and host2 can talk each other…
I have a solo account where I am the only user with 10 devices, but I need that only two Proxmox servers will be isolated from other hosts but communicate only each others.
Is this possible?
Now I’m doing this using firewall rules in each proxmox host allowing connections from boths tailscale machines on port 22 , and allowing desktop computer to connect on 8006 port.
Yes I want that only the two proxmox host can see each other, but the rest of the devices will not be able to communicate with the 2 hosts and viceversa
One thing people sometimes miss about ACL tags is that if you assign them to a device, then that device loses the automatic permissions granted by being created by that user. That is, ACL tags replace the permissions, rather than augmenting them. This lets you create “zero trust” style restrictions between knows, also known as RBAC or ABAC.
