On Mon, Mar 4, 2024 at 3:53 PM Tim Moody <tim(a)timmoody.com> wrote:
The mysql host ISP does not wish to open a port to an entire gateway, so I have two
choices, install tailscale or request a floating IP. Is tailscale permissible and possible
on vps?
If there is a client with an OSI approved Open Source license, then
yes it would be permissible. If not, then likely no per the TOU. [0]
It does appear that
https://github.com/tailscale/tailscale is licensed
under a 3-clause BSD license, so that is helpful. [1]
It does not at this point sound like your use case would be a
violation of the prohibition on network proxying [2] as the VPN would
be for traffic originating from your Cloud VPS instance and not a
generally open proxy for others or inbound traffic.
I wonder if there is an XY problem [3] here as well. What is the
underlying use case that requires you to connect to an off-premise
database to operate a Wikimedia focused tool in Cloud VPS? Is this
somehow related to your new project to generate ZIM files of MDWiki?
[4]
[0]:
https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.…
[1]:
https://github.com/tailscale/tailscale/blob/main/LICENSE
[2]:
https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.…
[3]:
https://en.wikipedia.org/wiki/XY_problem
[4]:
https://phabricator.wikimedia.org/T358023
Bryan
--
Bryan Davis Wikimedia Foundation
Principal Software Engineer Boise, ID USA
[[m:User:BDavis_(WMF)]] irc: bd808