A fresh pattern’s gaining traction: Docker + Tailscale sidecars replacing old-school reverse proxies and clunky VPNs. Each service runs as its own mesh-routed node, containerized and independent.

The trick? Network namespace sharing. App containers hook into the Tailscale mesh with no exposed ports, no shared networks. You keep Docker’s isolation and still get zero-trust access across 15+ services.

Big shift: Say goodbye to port-forwarding and central VPN headaches. Say hello to decentralized, identity-driven access—spun up in plain Compose files.