Hi there, I am currently comparing tailscale with Twingate. I would love to use Tailscale but there isn’t the option to route based on DNS instead of CIDR. Use case: We have a lot of SaaS apps running which allow the whitelisting of IP addresses. Obviously this doesn’t work well for us, because all our workers are working remote. We cannot just whitelist our office IP, because this is not enough.

Unfortunately I don’t know the IP addresses of some Apps and they do change from time to time. Twingate allows me to route based on DNS (For example *.example.com). So I can specify that specific apps are being accessed from a specific node with a specific public IP.

Any way to do this with Tailscale?

I wouldn’t like to use an exit note because this would mean that all traffic goes through the exit note. Also, most importantly, every user would need to manually select the exit node which is not user-friendly.