Changelog Interviews From Tailnet to platform
15 snips
Mar 11, 2026 
David Carney, Co-founder and Chief Strategy Officer at Tailscale, builds identity and connectivity features like TSIDP, TSNet, multi-tailnets, and Aperture. He discusses clickless in-tailnet auth via TSIDP. He explores TSNet apps and how multi-tailnets enable isolation and control. He introduces Aperture as a private AI gateway for API key management, observability, and agent security.
AI Snips
Chapters
Transcript
Episode notes
Install TSIDP From The Community Repo
- Try TSIDP today because it's open source and available on GitHub, supporting OAuth2/OAuth2.1 and updated for MCP compatibility.
- David notes many home-labbers already run it (Go binary/TSNet) and it can be started as a simple service on Proxmox/LXC.
TSNet Turns Apps Into Network Nodes
- TSNet is a user-space networking stack (Go library) that lets any compiled app appear as a Tailscale node with its own IP and policies.
- David says Aperture itself is a TSNet application, so apps get identity, ACLs, and show up like devices.
Aperture Centralizes AI Keys And Identity
- Aperture is a private AI gateway built on TSNet that centralizes API keys and logs inside your tailnet so every AI request carries identity.
- This gives one point of observability, control, token usage metrics, and eliminates sharing raw provider API keys across teams.