Tailscale - decentralised noconf Mesh VPN using Wireguard, alternative to ZeroTier etc

[marcusquinn]

• https://tailscale.com/
• https://tailscale.com/kb/1054/dns/ (this look very useful - if you trust them of course)
• https://github.com/tailscale/tailscale (not 100% sure how much is FOSS or reliant on their routing, could be more centralised than OmniEdge)
• https://hub.docker.com/r/tailscale/tailscale
• https://tailscale.com/blog/docker/
• https://alternativeto.net/software/tailscale/about/
• https://alternativeto.net/software/tailscale/
• https://forum.cloudron.io/topic/7560/omniedge-decentralised-noconf-mesh-vpn-using-wireguard-alternative-to-zerotier-tailscale-etc (Alternative)
• https://forum.cloudron.io/topic/7565/netmaker-foss-noconf-mesh-vpn-using-wireguard-alternative-to-zerotier-tailscale-omniedge-etc
• https://forum.cloudron.io/topic/7567/firezone-foss-noconf-mesh-vpn-using-wireguard-alternative-to-zerotier-tailscale-omniedge-netmaker-etc
• https://forum.cloudron.io/topic/7571/netbird-foss-noconf-mesh-vpn-using-wireguard-alternative-to-zerotier-tailscale-omniedge-netmaker-etc

A secure network that just works

Zero config VPN. Installs on any device in minutes, manages firewall rules for you, and works from anywhere.
Available for:
Linux
Windows
macOS
iOS
Raspberry Pi & ARM
Android
Synology
Docker

No config files, no firewall ports

Create a secure network between your servers, computers, and cloud instances. Even when separated by firewalls or subnets, Tailscale just works.

Every device on your network gets a stable IP and auto-assigned domain that stays consistent, no matter what Wi-Fi the device is on. It’s like a local network that works everywhere.

Access controls & monitoring

Define role-based access controls to restrict sensitive servers or authorize contractors to only see what they need. And every connection is centrally logged from both ends, viewable from a dashboard and logging API.

Automatic key rotation

Hourly and daily rotations minimizes the risk of stolen keys or stale credentials.
Secured with WireGuard

Tailscale builds on top of WireGuard’s Noise protocol encryption, a peer-reviewed and trusted standard.
Point-to-point connections

Low latency and private. None of your traffic ever touches our servers.
Audit-compliant logging

Logging from both ends of the connection ensures your network traffic is tamper-proof.

[robi]

Dupe?
Any reason it's not posted here, with 7 upvotes?

[marcusquinn]

@robi Sorry, didn't see that, I do like my wishlist posts to have all the links and images though, so excuse the enthusiasm

[robi]

@marcusquinn I'd say DM me the markdown code to update the post, but it's not editable anymore (post since 2020)

[marcusquinn]

@robi NodeBB has nice cross-referencing links now though, I'm sure people can find and upvote both if desired.

[robi]

@marcusquinn maybe @girish will merge.

[fbartels]

For Tailscale only the clients are open source, while their central unit is closed source.

There is however https://github.com/juanfont/headscale and Tailscale recently allowed a pr to the Android app to make the server backend configurable.

[marcusquinn]

@fbartels Wow, open-source communities are amazing when they do this kinda thing just because.