How might Tailscale expand its ACL capabilities to provide more granular access control options?

Introduction

Tailscale's ACL capabilities are a critical component of its network security offering, but there's room for improvement in providing more granular access control options. I'll explore how we can enhance this feature to better serve our users' evolving needs while maintaining Tailscale's core value proposition of simplicity and ease of use.

Clarifying Questions

• Looking at Tailscale's current ACL implementation, I'm thinking it might be primarily focused on network-level access control. Could you help me understand the current granularity of ACL controls and what specific limitations users are experiencing?

Why it matters: Determines the baseline for improvement and identifies key pain points. Expected answer: Current ACLs are primarily based on IP addresses and ports, with limited application-level controls. Impact on approach: Would focus on introducing application-layer ACLs and more fine-grained user permissions.

• Considering Tailscale's target market, I'm curious about the primary use cases driving the need for more granular ACL options. Can you share insights on the most common scenarios where users are requesting enhanced access control?

Why it matters: Helps prioritize which granular controls to implement first. Expected answer: Users in regulated industries need more detailed audit logs and role-based access control. Impact on approach: Would emphasize compliance features and integration with identity providers.

• Given Tailscale's position as a user-friendly VPN alternative, I'm wondering about the balance between enhanced functionality and maintaining simplicity. What's the current user feedback on ACL configuration complexity?

Why it matters: Ensures we don't overcomplicate the product while improving it. Expected answer: Users appreciate the simplicity but some power users want more advanced options. Impact on approach: Would consider a tiered approach with basic and advanced ACL configuration modes.

• Thinking about Tailscale's broader product strategy, how does improving ACL capabilities align with other planned features or company objectives?

Why it matters: Ensures our solution fits into the larger product roadmap. Expected answer: It's a key initiative to expand into enterprise markets and compete with traditional VPN solutions. Impact on approach: Would focus on enterprise-grade features and scalability in ACL improvements.