On Mon, Mar 4, 2024 at 3:53 PM Tim Moody <tim@timmoody.com> wrote:
>
> The mysql host ISP does not wish to open a port to an entire gateway, so I have two choices, install tailscale or request a floating IP. Is tailscale permissible and possible on vps?

If there is a client with an OSI approved Open Source license, then
yes it would be permissible. If not, then likely no per the TOU. [0]
It does appear that https://github.com/tailscale/tailscale is licensed
under a 3-clause BSD license, so that is helpful. [1]

It does not at this point sound like your use case would be a
violation of the prohibition on network proxying [2] as the VPN would
be for traffic originating from your Cloud VPS instance and not a
generally open proxy for others or inbound traffic.

I wonder if there is an XY problem [3] here as well. What is the
underlying use case that requires you to connect to an off-premise
database to operate a Wikimedia focused tool in Cloud VPS? Is this
somehow related to your new project to generate ZIM files of MDWiki?
[4]

[0]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.3_Open_Source_and_proprietary_software
[1]: https://github.com/tailscale/tailscale/blob/main/LICENSE
[2]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.5_Using_WMCS_as_a_network_proxy
[3]: https://en.wikipedia.org/wiki/XY_problem
[4]: https://phabricator.wikimedia.org/T358023

Bryan
--
Bryan Davis                                        Wikimedia Foundation
Principal Software Engineer                               Boise, ID USA
[[m:User:BDavis_(WMF)]]                                      irc: bd808
_______________________________________________
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-leave@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/