tailscale-mesh

plurigrid's avatarfrom plurigrid

Tailscale mesh VPN for secure peer-to-peer networking. WireGuard-based overlay network with MagicDNS and ACLs.

⭐1stars🔀2forks📁View on GitHub🕐Updated Jan 9, 2026
[Cloud Infrastructure]

When & Why to Use This Skill

This Claude skill integrates Tailscale's mesh VPN capabilities to provide secure, peer-to-peer networking based on the WireGuard protocol. It simplifies complex infrastructure tasks such as NAT traversal, MagicDNS management, and fine-grained access control (ACLs), ensuring seamless and encrypted connectivity across distributed environments and hybrid cloud setups.

Use Cases

  • Secure Remote Access: Effortlessly manage and SSH into private servers, databases, or edge devices across different networks without exposing them to the public internet.
  • Hybrid and Multi-Cloud Networking: Create a unified, secure overlay network that bridges local development machines, on-premise hardware, and instances across multiple cloud providers like AWS, GCP, or Azure.
  • Encrypted Peer-to-Peer File Sharing: Securely transfer sensitive data and files directly between authenticated devices within the mesh network using built-in Tailscale file-sharing commands.
  • Safe Web Service Exposure: Utilize Tailscale Funnel to securely expose local development ports to the public internet for testing or collaboration without complex port forwarding or VPN gateways.
nametailscale-mesh
descriptionTailscale mesh VPN for secure peer-to-peer networking. WireGuard-based overlay network with MagicDNS and ACLs.
version1.0.0

Tailscale Mesh Skill

Trit: 0 (ERGODIC - mediates network topology)
Foundation: Tailscale + WireGuard + DERP

Core Concept

Tailscale creates a mesh VPN:

  • WireGuard encryption
  • NAT traversal via DERP relays
  • MagicDNS for hostname resolution
  • ACLs for access control

Common Commands

# Status
tailscale status
tailscale netcheck

# Connect/disconnect
tailscale up
tailscale down

# Send files
tailscale file cp file.txt hostname:

# SSH
tailscale ssh hostname

# Funnel (public exposure)
tailscale funnel 8080

ACL Configuration

{
  "acls": [
    {"action": "accept", "src": ["group:dev"], "dst": ["*:*"]},
    {"action": "accept", "src": ["tag:server"], "dst": ["tag:db:5432"]}
  ],
  "tagOwners": {
    "tag:server": ["group:ops"],
    "tag:db": ["group:dba"]
  }
}

GF(3) Integration

def trit_from_connection(conn):
    """Map connection type to GF(3) trit."""
    if conn.type == "direct":
        return 1   # PLUS: optimal path
    elif conn.type == "derp":
        return 0   # ERGODIC: relayed
    else:
        return -1  # MINUS: failed/blocked

Canonical Triads

bisimulation-game (-1) ⊗ tailscale-mesh (0) ⊗ localsend-mcp (+1) = 0 ✓
spi-parallel-verify (-1) ⊗ tailscale-mesh (0) ⊗ tailscale-file-transfer (+1) = 0 ✓

See Also

  • tailscale-file-transfer - File transfer with open games semantics
  • localsend-mcp - P2P transfer via LocalSend

Scientific Skill Interleaving

This skill connects to the K-Dense-AI/claude-scientific-skills ecosystem:

Graph Theory

  • networkx [○] via bicomodule
    • Universal graph hub

Bibliography References

  • graph-theory: 38 citations in bib.duckdb
  • distributed-systems: 3 citations in bib.duckdb

Cat# Integration

This skill maps to Cat# = Comod(P) as a bicomodule in the equipment structure:

Trit: 0 (ERGODIC)
Home: Prof
Poly Op: ⊗
Kan Role: Adj
Color: #26D826

GF(3) Naturality

The skill participates in triads satisfying:

(-1) + (0) + (+1) ≡ 0 (mod 3)

This ensures compositional coherence in the Cat# equipment structure.