Tailscale
Mesh VPN on WireGuard, connecting your devices directly to each other
1/3Tailscale is a mesh VPN built on WireGuard: install it on each device and they connect directly to one another over an encrypted private network, without opening ports, configuring firewalls or routing everything through a central gateway. Access is governed by ACL policy rather than by network topology, so you declare which users and tagged resources can reach which services. Subnet routers and exit nodes bring existing networks and internet egress onto the same overlay, MagicDNS gives every machine a name, and Tailscale SSH handles server access without distributing keys. The free Personal plan covers unlimited devices for up to six users, and paid plans add SCIM provisioning, device posture checks through MDM and EDR tools, network flow logs and just-in-time access.
- Mesh VPN on WireGuard, with secure peer-to-peer connections
- ACLs for zero-trust access, rather than network topology
- Subnet routers and exit nodes for reaching existing networks
- Split tunnelling, and MagicDNS names for every machine
- Tailscale SSH for server access without distributing keys
- Unlimited user devices free, for up to six users
- Device posture integrations with MDM, EDR and XDR
- SCIM provisioning, network flow logs and log streaming
Based on what people have said
Every answer links back to the mentions it came fromWhat are the common performance issues when using Tailscale?
Several users report slow speeds or high latency, particularly when a direct peer-to-peer connection cannot be established and traffic must be routed through a relay server. Some users note that streaming media can be inconsistent or experience buffering, and others have observed that Tailscale may struggle with performance on lower-powered hardware or when used in regions with restrictive network environments.
6 mentions · r/MoonlightStreaming · r/Tailscale · r/Tailscale · r/GlInet · r/homelab · Aug 2026 – Sep 2026
Is Tailscale reliable for remote access?
Most users describe the service as reliable and a "life saver" for connecting to home networks or NAS devices. However, some users report connectivity failures, difficulty maintaining active connections on certain devices, or issues where the service is blocked by institutional firewalls, such as at universities, hospitals, or on cruise ships.
8 mentions · r/synology · r/Tailscale · r/Tailscale · r/Ubiquiti · r/Tailscale · r/Tailscale · Aug 2026 – Sep 2026
How does Tailscale handle security and privacy?
Tailscale is built on WireGuard and encrypts traffic end-to-end once it enters the tailnet. While many users appreciate the ability to close ports and avoid public exposure, some express concerns regarding the reliance on a centralized control plane, the requirement to authenticate via third-party providers like Google or Microsoft, and the potential for the company to access the network.
8 mentions · r/ClaudeAI · Hacker News · r/selfhosted · r/Tailscale · r/Tailscale · Aug 2026 – Sep 2026
Can I self-host Tailscale?
Tailscale does not provide an official self-hostable version of its control plane. Users who wish to self-host must use community-developed alternatives like Headscale to manage their own coordination server.
3 mentions · r/selfhosted · Aug 2026 – Sep 2026
What are the main use cases for Tailscale?
People commonly use Tailscale to create a private mesh network for remote access to home media servers like Plex or Jellyfin, to manage homelab resources without opening ports, to replicate data between offsite NAS units, and to securely access internal services while traveling.
8 mentions · r/synology · r/MoonlightStreaming · r/ClaudeAI · r/Tailscale · r/Tailscale · Hacker News · and 2 more · Aug 2026 – Sep 2026
These summarise counts and dates only. Read the quotes themselves under what people are saying.
What people are saying about Tailscale
42% neutral“Tailscale is still the most underrated tool in tech. Here's a quick video on how I actually use it.”
“I had it all setup manually before but then kept on running into conflict between Tailscale and Surfshark. It was a mission to troubleshoot the rules.”
“Tailscale/VPN/DNS + Threatlocker Web Control issues on macOS”
“I can get it up and running without errors, and can connect to the exit node, but the issue is that it always connect via DERP and my speeds tank.”
“I’m super pleased and now I have a decent middle ground for when I am not using WiFi.”
“In that mindset you would be putting massive amount of faith in the tailscale developers instead though. And instead of a the app, it’s the core for your entire authentication chain.”
“I currently have tailscale downloaded on my phone and can use jellyfin (i use the moonfin client) whenever i want, but to do so i just swipe down on my iphone and enable the vpn, then the app works like normal (moonfin will just reconnect to last connection which uses the magic dns name in tailscale) seems really easy to use once its working”
“Well done, I started initial setup with tailscale and realised it wasn't a quick job but a serious project that will need some time, and I came from the networking industry ”
“Tailscale is pretty easy compared to that.”
“You don’t need tailscale for local streaming. You don’t use an exit node for local streaming.”
“With Tailscale you don’t need to expose anything. With your own wireguard you need to expose wireguard but that’s a software that’s designed with security in mind.”
“i dont share myserver with random people and the 1 - 2 people i shared it with doesnt have an issue with directly using tailscale as it auto starts in the backround so this works”
“This will only help IOS/Apple users buuuuut, I have an automation/shortcut set to run anytime I open Jellyfin/Plex/Files app, it checks which WiFi network I’m on, if the WiFi name is not my home WiFi, it asks if I want to connect to tailscale, click yes, connects, everything loads.”
“This all sounds great but until they stop it eating all my iOS battery I can't leave my phone connected continuously, which is such a pain.I'm not about to switch back to the configuration management hell that was pure wireguard but it would be really lovely to not have to connect/disconnect when I want to use tailscale”
“Sure tailscale is a bit more safe for a reduced attack surface but there is still room to attack. Using a reverse proxy with something like swag/caddy will have fail2ban/crowsec built in and be significantly more convenient than tailscale with much less overhead.”
“Tailscale is a second party with a third party security system. You never know what they do.”
“I got the unify fiber gateway specifically for unify teleport and vpn integration.I find tailscale to be simpler, more reliable and cover my needs better.”
“I was playing with wireguard around 2020 when I learned of Tailscale and since then haven't looked back.Just the other day I was able to set my sister up with access to my Plex server and the ability to piggyback on my UK internet connection to stream BBC/Channel 4 content from Australia.”
“Or you gift them a little device that works as a Tailscale subnet router and that you administer via ssh. Then you have both”
“Please Tailscale don't get enshitified, I love you so much”
“No idea if this is what they meant, but it’s plausible that client battery usage goes up when connected to Tailscale using an exit node. Suddenly, a lot more traffic has to be processed in userland, on the CPU.”
“I'm sure I could achieve these goals with plain wireguard, but I feel like I was able to outsource significant complexity to tailscale instead.”
“Hey why do you hard code certain android apps to be excluded from Tailscale with split tunneling without giving users any way to disable split tunneling for these apps? It doesn't matter how you think VPN does or does not affect these apps, it's really awful anti-user behavior.”
“They have regular internet providers routers, and at least one of the routers wouldn’t even be able to properly support port forwarding.Tailscale allowed me to setup everything at home and just plug them to their network in 5 mins.”
“I use WireGuard instead of Tailscale to be able to do so remotely, but I only use it for administrative access.”