Tailscale的模型路由器由Vercel AI网关作为其底层基础设施提供支持。AI网关是新的CDN。您可以“直接到达源头...
Tailscale’s model router is powered by Vercel AI Gateway as its underlying infrastructure. AI Gateways are the new CDNs. You could go “direct to ori...
Guillermo RauchAI2026-09-11
Tailscale在Vercel上推出数百个AI模型
产品内模型访问由tailnet网络身份授予和撤销
从模型路由原型到付费客户仅用几个月时间
Tailscale将公司的笔记本电脑、服务器、云实例和个人设备连接到一个名为tailnet的私有网络。Tailscale的产品负责人Remy Guercio将其简单描述为：“基本上就像一个可以跨越任何云、本地、你的家和你的手机的VPC。”
Aperture将同样的理念应用于AI。不是为每个员工、代理或工具提供单独的提供商API密钥，Aperture允许公司通过tailnet本身控制模型访问。将某人添加到网络中，他们就可以立即使用批准的模型。移除他们，访问就会消失。
在内部，Aperture建立在Vercel AI Gateway和Vercel Sandbox之上。AI Gateway为Tailscale提供数百个模型的单一API。Sandbox为代理提供一个安全的地方运行。共同作用，它们让Tailscale能够在客户的私有网络内提供模型访问和代理执行，而无需他们的团队从头开始构建每一块AI基础设施。
模型路由比看起来更难
Tailscale是一家基础设施公司，因此内部构建路由和执行层是显而易见的第一选择。但一旦他们深入了解了所需的工程工作量，他们选择不这样做。从外面看，提供商层看起来欺骗性地简单。“你会认为所有端点都是相同的，”Remy说。“它们并不相同。”
联合创始人兼首席战略官David Carney有证据，因为Tailscale仍然在为一些尚未迁移到Aperture的客户维护这些管道。“有很多大提供商不做的事情让我感到震惊，而网关却做到了，比如简单地将成本计入响应中，”他说。“我们最初为我们的客户提供这些系统，”
原文
Copy link to headingTailscale on VercelHundreds of AI models shipped to customers in-productModel access granted and revoked by tailnet network identityWent from model routing prototype to paying customers in monthsTailscale connects a company's laptops, servers, cloud instances, and personal devices into one private network called a tailnet. Remy Guercio, who leads product for Aperture by Tailscale, describes it simply: "It's basically like a VPC that can span any cloud, on-prem, your house, and your phone."Aperture takes that same idea and applies it to AI. Instead of giving every employee, agent, or tool a separate provider API key, Aperture lets companies control model access through the tailnet itself. Add someone to the network, and they can immediately use approved models. Remove them, and access disappears.Under the hood, Aperture is built on Vercel AI Gateway and Vercel Sandbox. AI Gateway gives Tailscale one API for hundreds of models. Sandbox gives agents a safe place to run. Together, they let Tailscale offer model access and agent execution inside a customer's private network, without their team building every piece of AI infrastructure from scratch.Copy link to headingModel routing is harder than it looksTailscale is an infrastructure company, so building the routing and execution layers in-house was the obvious first option. But once they took a deeper look into the engineering effort required, they chose not to. The provider layer looked deceptively simple from the outside. "You would think all of the endpoints are the same," Remy says. "They are not."David Carney, Co-founder and Chief Strategy Officer, has the receipts, because Tailscale still maintains that plumbing for a few customers who haven't migrated to Aperture yet. "There are a lot of things the big providers don't do that blow my mind that the gateway does, like simply putting the cost in the response," he says. "We initially built those systems for customers ourselves, and the complexity is insane."Agents raised the stakes further. An agent that can read private data, act on the text it reads, and reach the public internet is a security problem now called the "lethal trifecta." The right mitigation is an isolated sandbox with identity and access controls baked in. "I think we wouldn't have been able to deliver the product if we were also trying to build a sandbox ourselves," David says. "But we were able to go from prototype to paying customers in months on Vercel." Copy link to headingBuilding a custom model router on AI GatewayTailscale shopped the routing layer first. "We did talk to a lot of other folks, including providers themselves, and Vercel just made it very easy," Remy says. AI Gateway gives Aperture one API across hundreds of models, and returns cost and usage on every request, so Aperture can surface spend to customers without Tailscale maintaining price tables for each provider.Tailscale's customers care about protecting