19How does NAT actually work, how do peers get through it, and why is 'we are behind NAT' not a security control?▼mediumNewGoogleMicrosoftCisco◆ premiumNAT drops unsolicited inbound packets as a side effect of bookkeeping, not policy. Port forwards, UPnP, outbound connections and IPv6 all walk around it.Open full answer →
28How does a mesh VPN like Tailscale work, and what are you trusting when you adopt one?▼mediumNewGoogleCloudflareMicrosoft◆ premiumThe packets are WireGuard; the interesting part is the coordination server that tells every device whose keys to accept. That server is what a strong answer threat-models.Open full answer →