App Connector
One destination. Two paths. Check your public IPv4, switch your Tailscale connection, and compare the results.
Source-IP testing Fresh checks, on demand
ORANGENOISE LABS
Sign in to continue.
Loading Google sign-in…
A browser-only sign-in experience. This static site and its IP lookup remain publicly accessible. No backend or protected data is behind this sign-in screen.
THE LABS
Small experiments. Clearer connections.
Choose a lab and see what changes along the way.
One destination. Two paths. Check your public IPv4, switch your Tailscale connection, and compare the results.
Source-IP testing Fresh checks, on demand
Future lab spaces, not available yet.
02 / ORCHESTRATION
Coming soon
03 / SESSION VISIBILITY
Coming soon
04 / ACCESS CONTROL
Coming soon
Personal demonstration workspace. Google sign-in controls the browser experience, not public access to these static pages or the IP lookup.
APP CONNECTOR LAB
Check your public source IP. Switch Tailscale on or off, then check again to see which address your connection uses.
Ready when you are. Nothing is checked until you click.
Each click makes a new lookup. This page cannot switch Tailscale or read its connection status.
Make another check to compare.
PREVIOUS CHECK
Not checked yet
Switch your connection, then check again.
LATEST SUCCESSFUL CHECK
Switch your connection, then compare.
Click the address button to capture your current public IPv4.
Turn Tailscale on or off in the Tailscale app. Give the connection a moment to settle.
Click again and compare. A matching IP identifies the demo connector’s public egress.
The result is the public IPv4 seen by ipify for the lookup request, not an address reported by the Labs web server. The lookup endpoint must also route through the App Connector for this comparison to demonstrate connector egress.
The demo connector’s expected IPv4 is 54.212.235.250. A match means that the lookup used that public address. A different IP does not, by itself, mean Tailscale is off. Exit nodes, VPNs, proxies, and routing settings can change the result.
This site stays public on either path. The check demonstrates routing, not destination access control. Google sign-in is a browser-only UI gate, not server-enforced protection of the site or lookup. Google verifies your account; this page verifies its signed response and Workspace domain.
Your session and comparisons live only in this tab’s memory and disappear on sign-out, expiry, or reload. This page stores no tokens, cookies, or browser storage and uses no analytics. Google’s sign-in service uses its own session mechanisms. Google receives sign-in traffic; ipify receives only your lookup request and public IP, never your Google credential.