Tailscale Mesh

Tailscale Mesh Skill

Trit: 0 (ERGODIC - mediates network topology)
Foundation: Tailscale + WireGuard + DERP

Core Concept

Tailscale creates a mesh VPN:

• WireGuard encryption
• NAT traversal via DERP relays
• MagicDNS for hostname resolution
• ACLs for access control

Common Commands

# Status
tailscale status
tailscale netcheck

# Connect/disconnect
tailscale up
tailscale down

# Send files
tailscale file cp file.txt hostname:

# SSH
tailscale ssh hostname

# Funnel (public exposure)
tailscale funnel 8080

ACL Configuration

{
  "acls": [
    {"action": "accept", "src": ["group:dev"], "dst": ["*:*"]},
    {"action": "accept", "src": ["tag:server"], "dst": ["tag:db:5432"]}
  ],
  "tagOwners": {
    "tag:server": ["group:ops"],
    "tag:db": ["group:dba"]
  }
}

GF(3) Integration

def trit_from_connection(conn):
    """Map connection type to GF(3) trit."""
    if conn.type == "direct":
        return 1   # PLUS: optimal path
    elif conn.type == "derp":
        return 0   # ERGODIC: relayed
    else:
        return -1  # MINUS: failed/blocked

Canonical Triads

bisimulation-game (-1) ⊗ tailscale-mesh (0) ⊗ localsend-mcp (+1) = 0 ✓
spi-parallel-verify (-1) ⊗ tailscale-mesh (0) ⊗ tailscale-file-transfer (+1) = 0 ✓

See Also

• tailscale-file-transfer - File transfer with open games semantics
• localsend-mcp - P2P transfer via LocalSend