This document details best practices and a reference architecture for Tailscale deployments on Microsoft Azure. The following guidance applies for all Tailscale modes of operation—such as devices, exit nodes, and subnet routers. Tailscale device —for the purposes of this document Tailscale device can refer to a Tailscale node, exit node ... A tailnet is your private network. When you log in for the first time to Tailscale on your phone, laptop, desktop, or cloud VM, a tailnet is created. For users on the Personal plan, you are a tailnet of many devices and up to 3 users. Each device gets a private Tailscale IP address in the CGNAT range and every device can talk directly to every ...A mesh network is a type of networking topology in which different nodes dynamically connect to each other in order to improve the overall efficiency of data transmission. Similarly, mesh VPNs use a peer-to-peer architecture to offer greater resiliency, scalability, and performance than conventional VPNs. This article explores the features, benefits, …With Tailscale Funnel, you can expose local services, individual folders, or even plain text to the public internet over HTTPS.We’ve heard from lots of Tailscale users about how they’re using Funnel, and we have collected these examples to help inspire you to use Funnel in new and interesting ways.Schedule a demo. Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location.This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs …Apr 18, 2023 · Today we’re announcing the third generation of Tailscale plans and pricing. Most noticeably: The Free plan is expanding from one to three users. Monthly paid plans now include three free users, and bill you only for additional users who actively exchange data over Tailscale (“usage-based billing”) rather than for a fixed number of seats. Fits into your preferred workflow. With 100+ integrations, Tailscale works with all your favorite tools. Provision resources that automatically join the tailnet using Terraform or Pulumi. Integrate ACL management into your existing GitOps workflow. Our docs will help you get started on building your tailnet today. See docs. Twingate and Tailscale both provide you with an easily configurable VPN solution for connecting your team members, regardless of location. Twingate will connect to your internal network and provide your team with the tools it needs to securely connect to your existing internal servers and cloud-hosted solutions like Azure, Digital Ocean, and AWS. Tailscale is a good product and made by smart people but it's Open Source only in marketing speech. User applications for Linux are open source, Win and Mac are closed source. But Control plane software is closed source, so you can't use it without doing all authentication through their central servers. This is the world that Tailscale lets you create, but historically the details on how you would actually do this are left as an exercise for the reader. Today, we're introducing a new way to add Tailscale to your Docker containers: our brand new universal Docker mod. This lets you add Tailscale to any Docker container based on linuxserver.io ...Tailscale works best when you install Tailscale on every client, server, or VM in your organization. That way, traffic is end-to-end encrypted, and no configuration is needed to move machines between physical locations. However, you may have machines you don’t want to, or cannot, install Tailscale on directly.Server.LocalClient. When you install Tailscale on a computer normally, you can make changes to its configuration using the tailscale command line tool. tsnet doesn't offer the ability to use the tailscale command line tool to change its configuration, but you can use the LocalClient to make all of the same changes. The tailscale command line tool is …The Tailscale SSH Console feature is available on all plans. How it works. Using WebAssembly (also known as Wasm), Tailscale SSH Console runs in the browser: the Tailscale client code, WireGuard®, a userspace networking stack, and an SSH client. When you initiate a session, Tailscale generates an ephemeral auth key with your identity, and …Run the installer. Note the new Tailscale icon in your system tray once installation is complete. If it is not visible, click the up arrow to find it in the system tray overflow area. Click on the Tailscale icon to expose configuration options and status messages. Under your account, click on Log in to launch a browser window, and authenticate ...Install Tailscale on every device you want on the VPN. Log into Tailscale on those devices. There is no step 4: You’re done! Much easier! Tailscale handles the IP addressing, public key management and connectivity between your devices. The devices will all connect to each other instead of one big central server.Solved from reddit u/artemis-sun. The option to “allow local network access” on your Mac allows the computer to access it’s own local LAN, not the exit node’s LAN. Other devices on your Mac’s local network can’t ping or reach your Mac if that option is disabled, and vice versa. It’s unrelated to your exit node’s LAN. Tailscale makes it easy to overlay any network topology, enforce the principle of least privilege, and continuously monitor your tailnet. Get started. Contact sales. All Features. Tailscale is a modern VPN built on top of Wireguard.It works like an overlay network between the computers of your networks - using NAT traversal.. Everything in Tailscale is Open Source, except the GUI clients for proprietary OS (Windows and macOS/iOS), and the control server.The Tailscale extension for Visual Studio Code lets you interact with resources in your tailnet from within the VS Code IDE. Download and install the extension. You can view the extension in the VS Code Marketplace, or open the extension in VS Code. Using the Machine explorer. You can interact with the machines in your tailnet from the primary ...Tailscale makes it easy to connect to your Tailscale network (known as a tailnet) by providing you with a stable IP address for each node such as a device or a server. These addresses stay the same, no matter where nodes move to in the physical world, making them easy to manage and share with non-technical users.This document details best practices and a reference architecture for Tailscale deployments on Microsoft Azure. The following guidance applies for all Tailscale modes of operation—such as devices, exit nodes, and subnet routers. Tailscale device —for the purposes of this document Tailscale device can refer to a Tailscale node, exit node ...Connections between Tailscale nodes are secured with end-to-end encryption. Browsers, web APIs, and products like Visual Studio Code are not aware of that, however, and can warn users or disable features based on the fact that HTTP URLs to your tailnet services look unencrypted since they’re not using TLS certificates, which is what those tools are …Tailscale is a modern VPN built on top of Wireguard.It works like an overlay network between the computers of your networks - using NAT traversal.. Everything in Tailscale is Open Source, except the GUI clients for proprietary OS (Windows and macOS/iOS), and the control server.Tailscale Kubernetes operator features and benefits. Easily expose services in your Kubernetes cluster to your Tailscale network. Securely connect to the Kubernetes control plane (kube-apiserver) via an API server proxy, with or without authentication. Seamless egress from a Kubernetes cluster to an external service on your Tailscale network.Tailscale | 7,845 followers on LinkedIn. Simple, secure networks for teams of any scale. Built on WireGuard. | For teams who want secure, private networks without weeks of setup and configuration ...Taildrop is a feature that makes it easy to send files between your personal devices on a Tailscale network. Taildrop is currently in alpha. Like all traffic sent over Tailscale, Taildrop transfers files over encrypted peer-to-peer connections, using the fastest available path. This makes it a great solution for sending sensitive or large files ... Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location. As discussed in this issue, I have implemented a wrapper script for the tailscale and tailscaled commands. This script simplifies the usage of these commands by providing default arguments and handling the --socket argument in a specific way. With this script, you can now use tailscale login directly without navigating to the tmp directory. The wrapper …Tailscale makes it easy to connect to your Tailscale network (known as a tailnet) by providing you with a stable IP address for each node such as a device or a server. These addresses stay the same, no matter where nodes move to in the physical world, making them easy to manage and share with non-technical users.Tailscale requires you to show ownership and control of a user's domain when signing up with a custom OIDC identity provider, or when requesting help from our support team for certain issues. Depending on your request, we will ask you to do one of the following actions: Set DNS TXT records. Respond to a confirmation email sent to a *@example ...5. Open the Machines page in the Tailscale admin interface. Once you've found the machine from the ellipsis icon menu, open the Edit route settings.. panel, and approve exported routes and or enable the Use as exit node option. 6. Devices on either subnet should be able to route traffic over the VPN.If you've configured this device to be …Tailscale works with Android 6.0 or later, including ChromeOS and Android TV devices. Download Tailscale from the Play Store or scan the QR code on the Tailscale Download page.. Launch the app and click Get Started, accept the prompts to install a VPN configuration, and allow push notifications.Push notifications serve to alert users that …If there is no relay "code" line in the tailscale status output, then your traffic is not being routed through DERP.. Also, the tailscale ping command will indicate whether a successful ping was by direct path or via DERP. tailscale ping will keep trying until it either sends 10 pings (the default if not using the --c flag) through the relays, or finds a direct path.A Tailscale VPN is highly secure, performant, and flexible, and about as easy to set up as a new shared calendar. Tailscale makes it possible for anyone to have the benefits of a professional-quality VPN without the headache or cost of traditional setup. How to access NAS remotely with Tailscale. Tailscale is a zero-config VPN.If your Synology NAS cannot connect to your tailnet after uninstalling and re-installing the Tailscale app, we recommend the following steps: SSH into your NAS and run the command: sudo tailscale up. Enter the password for your NAS (if prompted), then copy the provided URL. To authenticate, visit:Tailscale lets you connect your computers to each other so that you can use them together securely. As technology continues to advance, we’ll be carrying around more and more devices that, for convenience, we’ll call “computers.” Some of them are more limited than others, but today I want to talk about one device in particular: the Steam …Setting up the Kubernetes operator Prerequisites. Tailscale Kubernetes Operator must be configured with OAuth client credentials.The operator uses these credentials to manage devices via Tailscale API and to create auth keys for itself and the devices it manages.. In your tailnet policy file, create the ACL tags tag:k8s-operator and tag:k8s, and make … Build It Yourself. “ With our old VPN, we'd spend a lot of time worrying about client-side issues for our users. With Tailscale, we do need to maintain some infrastructure, but from an engineering perspective, that’s easy compared to the chaotic client-side issues we used to deal with. Hirotaka Nakajima, Senior Software Engineer at Mercari. We've deployed a Tailscale docker container alongside an nginx web server container. The network_mode setting on the nginx container routes all traffic for that container via the Tailscale container—this is often referred to as a "sidecar" container. In this fashion we can effectively directly deploy multiple individual services to our tailnet with unique names …Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location.This document details best practices and a reference architecture for Tailscale deployments on Microsoft Azure. The following guidance applies for all Tailscale modes of operation—such as devices, exit nodes, and subnet routers. Tailscale device —for the purposes of this document Tailscale device can refer to a Tailscale node, exit node ...tailscale up command. tailscale up connects your device to Tailscale, and authenticates if needed. Running tailscale up without any flags connects to Tailscale. You can specify flags to configure Tailscale's behavior. Flags are not persisted between runs; you must specify all flags each time. To clear previously set flags like tags and routes ...像我这样 参数 -verify-clients用来防止别人（知道你的域名后）白嫖你的中继节点，只认服务器上 tailscale 客户端登录的账号。如果你有给朋友白嫖的需求，可以把这 …In Tailscale, our goal is for every device on every tailnet to always have an IPv6 address, and be able to reach every other device on the tailnet using an IPv6 address. This means that if you use Tailscale for your peer-to-peer communication, you can write an IPv6-only app and save time. Tailscale will still carry it over IPv4 when needed.Setting up the Kubernetes operator Prerequisites. Tailscale Kubernetes Operator must be configured with OAuth client credentials.The operator uses these credentials to manage devices via Tailscale API and to create auth keys for itself and the devices it manages.. In your tailnet policy file, create the ACL tags tag:k8s-operator and tag:k8s, and make …In Tailscale, our goal is for every device on every tailnet to always have an IPv6 address, and be able to reach every other device on the tailnet using an IPv6 address. This means that if you use Tailscale for your peer-to-peer communication, you can write an IPv6-only app and save time. Tailscale will still carry it over IPv4 when needed.Tailscale now makes it easy to obtain certificates for nodes in your tailnet. Nodes generate a certificate private key and a Let’s Encrypt account private key, while the Tailscale client, via API calls to the Tailscale control plane, sets the TXT record needed for your nodes to complete a DNS-01 challenge.Then launch your codespace. Authorization. The first time the codespace starts it is necessary to authenticate it to join the tailnet. In the terminal window run: tailscale up --accept-routes. This will print a URL to visit in a browser where you can log into the desired account. Write code remotely by installing Tailscale on GitHub Codespaces.Tailscale works with iOS 15.0 or later. It supports both iPhone and iPad. Download Tailscale from the Play Store or scan the QR code on the Tailscale Download page.. Launch the app, click Get Started, accept the prompts to install a VPN configuration, and allow push notifications.Push notifications serve to alert users that they need to …Enable SSH Session Recording. Whenever a Tailscale SSH connection is initiated, store terminal output recording in any S3 compatible service or local disk to aid in security investigations, and meet compliance requirements. “ Uhh this is sweet! Redirecting SSL authentication to Tailscale to handle it for you eliminates the need to manage PKI ...Tailscale in your dev container. By including Tailscale in your dev container, you can make sure that any new environment you spin up in GitHub Codespaces will connect to your tailnet. To set this up, you’ll need to add a Tailscale client, and authenticate to Tailscale with an auth key. We recommend using a reusable auth key, rather than an ...Windows. improve throughput for userspace ("netstack") mode in the presence of packet loss. disable dynamic DNS updates for the tailscale interface via …The Tailscale SSH Console feature is available on all plans. How it works. Using WebAssembly (also known as Wasm), Tailscale SSH Console runs in the browser: the Tailscale client code, WireGuard®, a userspace networking stack, and an SSH client. When you initiate a session, Tailscale generates an ephemeral auth key with your identity, and …In Tailscale, our goal is for every device on every tailnet to always have an IPv6 address, and be able to reach every other device on the tailnet using an IPv6 address. This means that if you use Tailscale for your peer-to-peer communication, you can write an IPv6-only app and save time. Tailscale will still carry it over IPv4 when needed.The Tailscale integration integrates the Tailscale API with Home Assistant; giving you the possibility to monitor and automate on the state of the devices in your Tailscale VPN network (Tailnet). This integration DOES NOT make your Home Assistant accessible via Tailscale VPN remotely! If you want to access your Home Assistant instance remotely ...Tailscale works best when you install Tailscale on every client, server, or VM in your organization. That way, traffic is end-to-end encrypted, and no configuration is needed to move machines between physical locations. However, you may have machines you don’t want to, or cannot, install Tailscale on directly.Tailscale Serve is a feature that lets you route traffic from other devices on your Tailscale network (known as a tailnet) to a local service running on your device. You can think of this as sharing the service, such as a website, with the rest of your tailnet. This page provides information about how Serve works behind the scenes and how to ...You can use the Microsoft Intune mobile device management (MDM) solution to deploy Tailscale in your organization. You can configure a number of system policies, and you can then use Microsoft Intune to deploy these policies across devices in your organization.Tailscale system policies via Microsoft Intune are supported on Windows, … This document details best practices and a reference architecture for Tailscale deployments on Microsoft Azure. The following guidance applies for all Tailscale modes of operation—such as devices, exit nodes, and subnet routers. Tailscale device —for the purposes of this document Tailscale device can refer to a Tailscale node, exit node ... Tailscale can be installed on an OPNsense platform, joining it to your WireGuard-based mesh network. OPNsense is a community supported platform for Tailscale. Connect to the console of OPNsense via SSH or other means as you see fit. Select option 8) Shell and ensure you are the root user.Your protocol speaks to this proxy, and the proxy does both NAT traversal and relaying of your packets to the peer. This layer of indirection lets you benefit from NAT traversal without altering your original program. With prerequisites out of the way, let’s go through NAT traversal from first principles. Nebula Reviewhttps://youtu.be/94KYUhUI1G0ZeroTier Reviewhttps://youtu.be/Bl_Vau8wtgcHow To Work Remotely Using Zerotier & Windows Remote Desktop (RDP)https:/... How to get started with Tailscale in under 10 minutes.https://tailscale.com/3 users and 100 devices for free. Try Tailscale today!Overview. This guide describes steps to deploy a Tailscale subnet router to an Amazon Virtual Private Cloud (Amazon VPC) to enable direct access to Amazon Elastic Compute Cloud (Amazon EC2) instances running Tailscale. The subnet router enables access to additional Amazon EC2 instances in the Amazon VPC. The deployment takes …DGentry February 12, 2022, 6:46am 2. The tailscale client creates a number of network resources: a routing table. an iptables table. a /dev/net/tun interface. The Linux client writes to /etc/resolv.conf if the Tailnet has any settings in Tailscale. The Linux client can be told to ignore DNS settings from the tailnet using:If your Synology NAS cannot connect to your tailnet after uninstalling and re-installing the Tailscale app, we recommend the following steps: SSH into your NAS and run the command: sudo tailscale up. Enter the password for your NAS (if prompted), then copy the provided URL. To authenticate, visit:We’re thrilled to announce that Tailscale SSH is now Generally Available. Tailscale SSH allows Tailscale to manage the authentication and authorization of SSH …Userspace networking mode allows running Tailscale where you don't have access to create a VPN tunnel device. This often happens in container environments. Tailscale works on Linux systems using a device driver called /dev/net/tun, which allows us to instantiate the VPN tunnel as though it were any other network interface like Ethernet or Wi-Fi. Install Tailscale on your device to access your containers via your tailnet. Using the Tailscale extension. Click the Tailscale extension in the Docker Desktop sidebar to see your open containers and their Tailscale IP addresses and URLs. Click a URL to copy it. You could send the URL to other users on your tailnet so they can access your ... To install Tailscale on a High Sierra or Mojave system, visit the Purchased Items in the App Store Account page. macOS High Sierra or Mojave systems will be offered Tailscale 1.44 when the download link is clicked. If Tailscale does not appear in the Purchased Items it must first be successfully installed using a recent macOS system.Tailscale Android Client. Contribute to tailscale/tailscale-android development by creating an account on GitHub. Tailscale SSH allows Tailscale to manage the authentication and authorization of SSH connections on your tailnet. Tailscale SSH is available for the Personal, Premium, and Enterprise plans. With Tailscale SSH, you can: SSH as normal, using Tailscale for authentication. With Tailscale SSH, Tailscale takes over port 22 for SSH connections ... Life is better when you connect more devices to your tailnet — the group of devices that forms your Tailscale network. In today's video we cover setting up a tailnet …Tailscale works with iOS 15.0 or later. It supports both iPhone and iPad. Download Tailscale from the Play Store or scan the QR code on the Tailscale Download page.. Launch the app, click Get Started, accept the prompts to install a VPN configuration, and allow push notifications.Push notifications serve to alert users that they need to …The easiest, most secure way to use WireGuard and 2FA. A SQL playground service over Tailscale. A lightweight schema manager for SQLite databases. Tailscale is a WireGuard-based app that makes …This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs …The Tailscale software that runs on your devices is split across several binaries and processes. Platform differences. On most platforms, the CLI is a binary named tailscale (or tailscale.exe) and the more privileged daemon that does all the network handling is called tailscaled (or tailscaled.exe).Note the final d for "daemon". The majority of the CLI …Tailscale uses both direct and relayed connections, opting for direct connections where possible. When diagnosing unexpected performance issues, the most common cause is using a relayed connection where a direct connection is possible. Tailscale operates a fleet of DERP relay servers around the world. Any device which can open an HTTPS ...The Tailscale integration integrates the Tailscale API with Home Assistant; giving you the possibility to monitor and automate on the state of the devices in your Tailscale VPN network (Tailnet). This integration DOES NOT make your Home Assistant accessible via Tailscale VPN remotely! If you want to access your Home Assistant instance remotely ...Run the installer. Note the new Tailscale icon in your system tray once installation is complete. If it is not visible, click the up arrow to find it in the system tray overflow area. Click on the Tailscale icon to expose configuration options and status messages. Under your account, click on Log in to launch a browser window, and authenticate ...Tailscale Serve is a feature that lets you route traffic from other devices on your Tailscale network (known as a tailnet) to a local service running on your device. You can think of this as sharing the service, such as a website, with the rest of your tailnet. This page provides information about how Serve works behind the scenes and how to ...You hereby assign to Tailscale all right, title and interest in and to all feedback, suggestions, ideas, improvements and other comments provided by you to Tailscale relating to the Service (collectively, “Feedback”), and Tailscale will have the unrestricted right to use and disclose Feedback, without duty or obligation to you, and you acknowledge that any …Version 1.62.0. - Changed: Taildrop notifications now include actions to reveal the received file in the Finder, or delete it. - Changed: Tailnet lock settings UI displays more information about the status, including key and public key trust status. - Changed: Launch Tailscale at login settings item can now be toggled when the Tailscale client ... Learn about identity providers that work with Tailscale. A tailnet name identifies your tailnet and is used in features such as MagicDNS, HTTPS certificates, and sharing. See how to set contacts for account changes, configuration issues, security issues, and billing. Learn how to install Tailscale, create a network, and invite your team.
Tailscale provides each device on your network with a unique IP address that stays the same no matter where your devices are. However, IP addresses aren't very memorable, and can be unwieldy to work with. You can map Tailscale IPs to human readable names using DNS. You can manage DNS for your Tailscale network in at least three ways:. Nearest hospital to me
Taildrop is a feature that makes it easy to send files between your personal devices on a Tailscale network. Taildrop is currently in alpha. Like all traffic sent over Tailscale, Taildrop transfers files over encrypted peer-to-peer connections, using the fastest available path. This makes it a great solution for sending sensitive or large files ...Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location.The Tailscale extension for Visual Studio Code lets you interact with resources in your tailnet from within the VS Code IDE. Download and install the extension. You can view the extension in the VS Code Marketplace, or open the extension in VS Code. Using the Machine explorer. You can interact with the machines in your tailnet from the primary ...© 2024 Tailscale Inc. All rights reserved. Tailscale is a registered trademark of Tailscale Inc. Tailscale SSH allows Tailscale to manage the authentication and authorization of SSH connections on your tailnet. Tailscale SSH is available for the Personal, Premium, and Enterprise plans. With Tailscale SSH, you can: SSH as normal, using Tailscale for authentication. With Tailscale SSH, Tailscale takes over port 22 for SSH connections ... Install Tailscale. Download Tailscale. New users should follow the Tailscale Quickstart to create an account and download Tailscale. The following topics provide alternatives to downloading via the Quickstart, along with additional information about client setup. Updating Tailscale. Uninstalling Tailscale. Installing on Linux. Installing on macOS. The easiest, most secure way to use WireGuard and 2FA. A SQL playground service over Tailscale. A lightweight schema manager for SQLite databases. Tailscale is a WireGuard-based app that makes …Tailscale also provides the Tailscale Kubernetes operator. The Kubernetes operator lets you: Expose services in your Kubernetes cluster to your Tailscale network (known as a tailnet) Securely connect to the Kubernetes control plane (kube-apiserver) via an API server proxy, with or without authentication. IP addresses are handled differently on Tailscale compared to ZeroTier. In ZeroTier you can manually assign addresses, so I had the last octet of all my ZeroTier server IP address matching their local addresses. So PiHole at 192.168.6.100 would be 10.242.0.100 on ZeroTier. (BTW, that last octet also matches the ID number in Proxmox, and the MAC ... For information about creating a tailnet, see the Tailscale quickstart. Step 1: Open Windows Firewall with Advanced Security. Open your Start Menu, type Windows Defender Firewall with Advanced Security , and click its icon to open the Advanced Security console of the Windows Firewall. Step 2: Find remote desktop rules.Apr 18, 2023 · Today we’re announcing the third generation of Tailscale plans and pricing. Most noticeably: The Free plan is expanding from one to three users. Monthly paid plans now include three free users, and bill you only for additional users who actively exchange data over Tailscale (“usage-based billing”) rather than for a fixed number of seats. Oct 20, 2022 · MagicDNS is available for all plans. If you add a new webserver called my-server to your network, you no longer need to use its Tailscale IP: using the name my-server in your browser's address bar or on the command line will work. MagicDNS does not require a DNS nameserver if running Tailscale v1.20 or later. You can manage nodes on your network, users and their permissions, and settings such as key expiry. The admin console also informs you if an update to the Tailscale client is available for your device. Changes to your tailnet are immediately published to all relevant machines by the coordination server. The admin console is located at https ...Tailscale is a zero config VPN for building secure networks. Install on any device in minutes. Remote access from any network or physical location.The exit node feature lets you route all non-Tailscale internet traffic through a specific device on your Tailscale network (known as a tailnet). The device routing your traffic is called an "exit node." Exit nodes are available for all plans. By default, Tailscale acts as an overlay network: it only routes traffic between devices running ...Tailscale also provides the Tailscale Kubernetes operator. The Kubernetes operator lets you: Expose services in your Kubernetes cluster to your Tailscale network (known as a tailnet) Securely connect to the Kubernetes control plane (kube-apiserver) via an API server proxy, with or without authentication.Apr 18, 2023 · Today we’re announcing the third generation of Tailscale plans and pricing. Most noticeably: The Free plan is expanding from one to three users. Monthly paid plans now include three free users, and bill you only for additional users who actively exchange data over Tailscale (“usage-based billing”) rather than for a fixed number of seats. .