Tailscale integration
Integrate Tailscale mesh VPN devices and access policies to build zero-trust network compliance and device lifecycle automation.
What it connects
- All connected devices with their IPs, hostnames, operating systems, and last-seen status
- Users and team members with their roles, device ownership counts, and online status
- Authentication keys including their expiry dates and revocation status for lifecycle tracking
- Network access control policies defining which devices and users can reach which resources
What it automates
- Authorize or revoke device access by updating device authorization state on the tailnet
- Update ACL tags on devices to enforce security policies and control network access
- Approve or modify subnet routes that devices are allowed to advertise within the network
- Manage DNS configuration by updating nameservers and search paths across the tailnet
In practice
When an employee is offboarded, STLabs automatically revokes their device from Tailscale and removes all associated auth keys, ensuring no stale access remains.
A new remote office opens; STLabs adds their subnet route to Tailscale, automatically making the office network accessible to all authorized team devices.
Compliance audits require devices to have specific security tags; STLabs scans connected devices and automatically applies the correct ACL tags based on device type and owner.
An engineer needs temporary access to production infrastructure; STLabs creates a time-limited auth key with the minimal required tags, expiring automatically after the maintenance window.
