Why Tailscale is slow: relay vs direct
Relayed Tailscale is slow, direct is close to line rate. Two commands tell you which you have, plus the blocked UDP and hard NAT fixes for a VPS.
#tailscale
Filtering by topic #tailscale · clear
Run Tailscale in a Docker Compose Stack
The vendor Compose example leaves your app on a public host port. Use a Tailscale sidecar so the container has no published port, only a tailnet name.
What Tailscale's tailnet lock actually protects
Tailnet lock stops a compromised Tailscale coordination server from adding a node to your tailnet. It also gives you ten secrets you must not lose.
Tailscale student and education discounts
Tailscale has no student checkout. Read on 2026-08-31: schools and nonprofits get 50% off list prices via Support, and Personal stays free for you.
Tailscale alternatives compared: 6 real options
NetBird, ZeroTier, Nebula, Netmaker, Headscale and Twingate, sorted by whether you can really self-host the control plane, and what breaks when you do.
Tailscale pricing after the free plan
Tailscale bills per user, not per device. Work out what a household and a five person team really pay, which limit you hit first, and when Headscale wins.
Is Tailscale secure? The trust model
Tailscale never holds the keys that encrypt your traffic. The real question is what a compromised coordination server or a stolen identity account can do.
Is Tailscale free? What the plans cover
Tailscale is free for up to six users with unlimited user devices. Here is what a seat, a device and a tagged resource cost, and when Headscale wins.
What is Tailscale and how does it work?
Tailscale explained: WireGuard tunnels between your servers, a coordination server for keys and ACLs, NAT traversal, DERP relays, and the threat model.
Reach the DSH web UI on your VPS
The DSH web UI binds to 127.0.0.1:3080, so the URL your VPS prints will not open on your laptop. Three safe ways to reach it, and one you should avoid.
Tailscale serve vs funnel: which to use
Tailscale serve puts HTTPS on a tailnet-only URL. Funnel opens that same port to the public internet. Which to use, and the policy gate that blocks funnel.
Fix Tailscale install errors on Ubuntu
Most Tailscale install errors on Ubuntu are apt errors. Read the status code apt printed, then fix the release codename or the signing keyring.
Self-host the NetBird VPN server on a VPS
Run the NetBird mesh VPN on one VPS: DNS and TLS setup, the pinned quickstart script, setup keys for unattended peers, and how it compares to Headscale.
Run a Tailscale subnet router on a VPS
Advertise a private network to your tailnet from a VPS: route approval, IP forwarding that survives a reboot, and the --accept-routes flag Linux needs.
Use your VPS as a Tailscale exit node
Turn your VPS into a Tailscale exit node: install, advertise, enable IP forwarding, approve the route in the admin console, then fix DNS and IPv6.
Reach your Hermes agent from your phone
Your Hermes agent runs on a VPS. Reach it from a phone over a private mesh or a public HTTPS endpoint, and revoke access when the phone goes missing.
Gluetun: reach the host and other containers
A container behind Gluetun has no interfaces of its own. Publish its ports on Gluetun, and open only the subnets it must reach outside the tunnel.
Headscale: self-host your own Tailscale
Run your own Tailscale control server on a VPS. Install headscale from the official .deb, set server_url before you start it, then join your first node.
WireGuard vs Tailscale vs Headscale
Tailscale is WireGuard plus a control plane. What that coordination server buys you, what it costs you, and which of the three belongs on your VPS.