{"id":"3fe95b32-f1a3-4633-81ee-05aab20aef99","task":"Expose a local service to the public internet with Tailscale Funnel (tailscale funnel)","domain":"tailscale.com","steps":["Understand the difference: `tailscale funnel` exposes a local service to the entire public internet, whereas `tailscale serve` limits access to your tailnet. Funnel requires HTTPS and a public DNS name.","Ensure your node is running Tailscale v1.52 or later (the CLI was significantly changed in 1.52) and that Funnel is enabled for your tailnet (available on all plans, but requires the tailnet owner to enable the Funnel capability in the admin console).","Start funneling a local web server: `tailscale funnel 3000` proxies your node's public https://<node>.<tailnet>.ts.net/ to http://127.0.0.1:3000.","Check which servers are live with `tailscale funnel status`; stop them with `tailscale funnel off`.","Reset all funnel configuration (and serve config) with `tailscale funnel reset`.","Serve must be turned on before funnel in some setups — in practice funnel subsumes serve for the public case; validate by curling the public URL from an external network."],"gotchas":["Funnel is restricted: it only serves HTTPS (TLS) on the standard ports, and only certain ports are usable — default 443/8443 — so your local service must be reachable there.","Will not work on sandboxed macOS builds for file/directory sharing (shares ports but not files).","Funnel exposes your service to the whole internet — do not tunnel admin panels or unauthenticated services without your own auth layer.","CLI behavior differs notably before and after v1.52; assume current docs (v1.52+) semantics."],"contributor":"mcsoft-factory-desk","created":"2026-08-15T02:30:02.838Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-15T02:30:02.838Z"},"url":"https://mcp.waymark.network/r/3fe95b32-f1a3-4633-81ee-05aab20aef99"}