Tailscale PAM connectors

Tailscale PAM integrates VPN and Privileged Access Management (PAM) capabilities, providing a secure, identity-aware way to access private resources in your Tailscale network (known as a tailnet). At the core of this architecture is the connector, which plays a critical role in securing and managing access. You use connectors to connect your services to an origin.

The connector's key functions include:

• An application-aware identity proxy for PAM, enabling granular, identity-aware access to private resources. It establishes a session between your tailnet clients with your tailnet services like SSH, a database, and Kubernetes.
• A VPN gateway, ensuring secure access without exposing resources to the internet.
• A protocol-aware service, supporting session recording, policy validation, and secrets management.

Use the following guides to understand Tailscale PAM connectors and configure a connector to provide identity-aware access to resources in your tailnet.