Tailscale Turns Local Apps Public With 1 Command via HTTPS
Updated
Updated · MUO - MakeUseOf · Aug 7
Tailscale Turns Local Apps Public With 1 Command via HTTPS
2 articles · Updated · MUO - MakeUseOf · Aug 7
Summary
Tailscale’s Funnel command can expose a local web app as a public HTTPS endpoint in about five seconds, letting people outside a tailnet open it without a Tailscale account, VPN or port forwarding.
Funnel differs from Tailscale Serve by publishing only one selected app to the public internet while leaving the rest of the tailnet private, with HTTPS termination and certificate handling managed automatically.
The tradeoff is security: once an app is funneled, tailnet access rules no longer protect public visitors, so the app itself must enforce authentication and the exposure stays live until manually turned off.
That makes Funnel useful for low-stakes demos, webhooks and remote dashboards that do not justify a VPS, while reducing the need for dynamic DNS, reverse proxies and router configuration.