DEV Community

Cover image for Mastering Connectivity: CG-NAT Solutions with Tailscale

Mastering Connectivity: CG-NAT Solutions with Tailscale

Ayaan Bordoloi on January 29, 2024

Recently, the CEO of Supabase tweeted about the importance of transitioning from IPv4 to IPv6. This is due to the shortage of IPv4 addresses, and m...
Collapse
 
thosch66 profile image
Thomas Schewe

You donβ€˜t need to reset the password of the root-account. You can upload your public ssh-key to Hetzner and they will load it into the cloud instance. Ghis will allow you to access the machine via ssh passwordless.

(It is an security risk to use password authentication for ssh on any machine that is connected to the internet.)

Collapse
 
ayaan49 profile image
Ayaan Bordoloi • Edited

It requires a public IP to ssh into the machine, and public IP is not free. The point of this blog was to ssh into the machine without the use of public IP to reduce cost. We just needed a way to somehow get into the machine and install Tailscale so that we could connect the machine to our Tailscale network and ssh using that. That is the reason I used the password authentication method.

However, I missed a step where we needed to disable all root access and password based access after installing Tailscale. This will help us tackle that security risk. Thanks for bringing it to my notice.