tailscale funnel options
tags: learning networking
content
--tls-terminated-tcp: the funnel expects https request, decrypts it, and forward the tcp packets (after decryption) to backend service- it’s good for when the backend does not support TLS. this way the communication between funnel (still on the host machine) and public internet is https
- just that from funnel to backend (both on same machine) is not encrypted