Homelab Academy / Modules
Independent application with evidence.
Module: Edge Access & VPN
Activity type: Homework / independent application
Objective: Explain how Tailscale separates identity and policy decisions from encrypted peer-to-peer packet transport.
Extend the design without changing its least-privilege principle.
Add a hypothetical second legacy service with a different single-host address and justify its prefix length.
Decide whether operators need the new service and add both a positive and a negative test.
Describe how offboarding Carol would differ from retiring the subnet router.
Explain what evidence should be collected before and after route approval.
Keep all optional homework artifacts under /opt/lab-classroom/class68/.
Submit the revised design, test rationale, and a short explanation of why group membership, tag ownership, device approval, and route approval solve different problems.