mDNS and Tailscale Fail in Different Ways
A .local name and a Tailscale peer can refer to the same host while depending on different discovery systems.
A .local name and a Tailscale peer can refer to the same host while depending on different discovery systems.
Remote deployment is unreliable when host identity, user and access policy are rediscovered every time.
A peer can be reachable over the tailnet while an SSH login is correctly denied by another policy layer.
A few failed SSH logins are normal on an administered server, while a rapid burst can indicate brute-force activity or a broken automation credential.
"SSH is not working" can mean several different things: the address is wrong, there is no route, nothing is listening on the port, or authentication failed. Restarting the server is not the universal answer.
I troubleshoot from the network boundary inward so I do not restart a healthy server because one naming or authorization layer failed.
Moving from local console access to SSH keys changed the lab from a collection of machines into something I could actually operate and troubleshoot remotely.