[davidgl]

From the tool itself:

SSH to a Tailscale machine

USAGE tailscale ssh [user@]<host> [args...]

The 'tailscale ssh' command is an optional wrapper around the system 'ssh' command that's useful in some cases. Tailscale SSH does not require its use; most users running the Tailscale SSH server will prefer to just use the normal 'ssh' command or their normal SSH client.

The 'tailscale ssh' wrapper adds a few things:

* It resolves the destination server name in its arguments using MagicDNS, even if --accept-dns=false.

* It works in userspace-networking mode, by supplying a ProxyCommand to the system 'ssh' command that connects via a pipe through tailscaled.

* It automatically checks the destination server's SSH host key against the node's SSH host key as advertised via the Tailscale coordination server.