Tailscale
Mesh virtual private network built on WireGuard: connects your devices and servers without complex network configuration. Free Personal plan up to 6 users; Standard at $8 per user per month.
WireGuard is free software, and Headscale reproduces Tailscale's coordination server: you can set up the same private network on your server in half a day. What you lose: automatic traversal of firewalls and carrier networks (NAT), the polished mobile apps, identity-based access management and the availability of the service. Replaceable if you are comfortable with network administration.
What you lose
- Automatic traversal of firewalls and NAT
- The polished mobile apps
- Identity-based access management
- Availability of the coordination service
Existing alternatives to Tailscale
- HeadscaleOpen source
Free coordination server (BSD-3-Clause) compatible with Tailscale clients, to host yourself.
The prompt to build it yourself
Set up a self-hosted mesh private network for my devices, to replace Tailscale. Do not develop a VPN: deploy Headscale (a free coordination server, compatible with Tailscale clients) on my VPS. To do: - A docker-compose.yml with Headscale's official image, Caddy in front for HTTPS on a subdomain that I give you. - One namespace per use (personal, servers), single-use, time-limited pre-auth keys. - The official Tailscale clients pointed at my server (--login-server), on my computer, my phone and two test servers. - Minimal access rules (ACL): my devices talk to everything, servers only talk to each other. - A built-in DERP relay server enabled, for networks that block direct connections. - A nightly encrypted backup of Headscale's database, a tested restore script, and a pinned-version update procedure. Out of scope: enterprise SSO, flow logs, just-in-time access. README: adding a device, revocation, restore, and a reminder that if my VPS goes down, already-established connections keep going but no device can open new ones.
Frequently asked questions
- Can Tailscale be replaced by a custom-built tool?
- casevibecode verdict: Partly replaceable. WireGuard is free software, and Headscale reproduces Tailscale's coordination server: you can set up the same private network on your server in half a day. What you lose: automatic traversal of firewalls and carrier networks (NAT), the polished mobile apps, identity-based access management and the availability of the service. Replaceable if you are comfortable with network administration.
- What is Tailscale used for?
- Mesh virtual private network built on WireGuard: connects your devices and servers without complex network configuration. Free Personal plan up to 6 users; Standard at $8 per user per month.
- What alternatives to Tailscale already exist?
- Headscale (open source). Options to compare before committing to a custom build.
Community feedback
Readers tell what they built instead of this tool, or what broke along the way. Every entry is reviewed before publication.
No feedback published yet. Have you tried replacing this tool? Tell us about it.