On Mon, Mar 4, 2024 at 3:53 PM Tim Moody tim@timmoody.com wrote:
The mysql host ISP does not wish to open a port to an entire gateway, so I have two choices, install tailscale or request a floating IP. Is tailscale permissible and possible on vps?
If there is a client with an OSI approved Open Source license, then yes it would be permissible. If not, then likely no per the TOU. [0] It does appear that https://github.com/tailscale/tailscale is licensed under a 3-clause BSD license, so that is helpful. [1]
It does not at this point sound like your use case would be a violation of the prohibition on network proxying [2] as the VPN would be for traffic originating from your Cloud VPS instance and not a generally open proxy for others or inbound traffic.
I wonder if there is an XY problem [3] here as well. What is the underlying use case that requires you to connect to an off-premise database to operate a Wikimedia focused tool in Cloud VPS? Is this somehow related to your new project to generate ZIM files of MDWiki? [4]
[0]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.3... [1]: https://github.com/tailscale/tailscale/blob/main/LICENSE [2]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.5... [3]: https://en.wikipedia.org/wiki/XY_problem [4]: https://phabricator.wikimedia.org/T358023
Bryan