[GH-ISSUE #413] Use Tailnet for Secure Cross-Server Database Connections #270

New issue

Open

opened 2026-03-03 11:14:25 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 11:14:25 +03:00

Owner

Originally created by @charanm927 on GitHub (Aug 13, 2025).
Original GitHub issue: https://github.com/dflow-sh/dflow/issues/413

Description:

Enable dFlow to connect databases hosted on separate servers via Tailnet (Tailscale network). By default, create all user databases on dFlow-managed servers and connect services to them securely using Tailnet. This approach improves security, performance, and simplifies DB networking without exposing databases to the public internet.

Acceptance Criteria:

Configure Tailnet to allow secure, private connections between servers hosting services and databases.
Automatically add database server(s) to the same Tailnet as application servers.
Create all user databases on dFlow-managed DB servers by default.
Generate and inject private Tailnet connection strings into services.
Ensure connections remain functional during Tailnet IP changes (use MagicDNS where possible).
Log connection setup and errors for troubleshooting.

Benefits:

Improves database security by removing public exposure.
Simplifies multi-server DB networking for users.
Centralizes database hosting on optimized servers.

Originally created by @charanm927 on GitHub (Aug 13, 2025). Original GitHub issue: https://github.com/dflow-sh/dflow/issues/413 **Description:** Enable dFlow to connect databases hosted on separate servers via Tailnet (Tailscale network). By default, create all user databases on dFlow-managed servers and connect services to them securely using Tailnet. This approach improves security, performance, and simplifies DB networking without exposing databases to the public internet. **Acceptance Criteria:** - Configure Tailnet to allow secure, private connections between servers hosting services and databases. - Automatically add database server(s) to the same Tailnet as application servers. - Create all user databases on dFlow-managed DB servers by default. - Generate and inject private Tailnet connection strings into services. - Ensure connections remain functional during Tailnet IP changes (use MagicDNS where possible). - Log connection setup and errors for troubleshooting. Benefits: - Improves database security by removing public exposure. - Simplifies multi-server DB networking for users. - Centralizes database hosting on optimized servers.