Documentation

• Start
  • Quickstart
  • Install Tailscale
  • Quick guides
  • OpenVPN migration guide
  • Legacy VPN migration guide
  • Set up an identity provider
  • What is Tailscale?
• How-to Guides
  • Manage Access
    • Manage access control
    • Manage just-in-time access
    • Manage devices
    • Manage users
    • Tailnet Lock
  • Route Traffic
    • Set up a subnet router
    • Set up an exit node
    • Set up an app connector
    • Use DNS
    • Set up MagicDNS
    • Set up high availability
  • Set Up Servers
    • Set up a server
    • Use tags
    • Install Tailscale with cloud-init
    • Use auth keys
    • Automate key expiry
    • Use Tailscale SSH
    • Set up HTTPS certificates
    • Run an ephemeral node
    • Run unattended
  • Access & Share Services
    • Tailscale services
    • Endpoint collection
    • Share nodes
    • Use Taildrop
  • Share a web server
    • Tailscale Funnel
    • Tailscale Serve
  • Solutions
    • Secure traffic with Apple TV
    • Secure GitHub Actions runners
    • Block ads with a Raspberry Pi
    • Access remote desktops with Windows RDP
    • Access remote desktops with RustDesk
    • Connect to MongoDB Atlas
    • Code from your iPad
    • Lock down a server
    • Protect production databases
    • Access a PiKVM
    • Secure external services
    • Just-in-time access
    • Automation
• Integrations
  • Cloud servers
  • Containers and virtualization
  • Serverless apps
  • Databases
  • Remote environments
  • Developer tools
  • Firewalls
  • Web servers
  • NAS
• FAQ
• Logging, Streaming, and Events
  • Logging overview
  • Configuration audit logging
  • Network flow logs
  • Log streaming
  • SSH session recording
  • Client metrics
  • Webhooks
• Manage Your Organization
  • Contact preferences
  • Pricing and billing
  • Tailnet name
  • Domain ownership
• Reference
  • Tailnet policy file syntax
  • ACL examples
  • Grant examples
  • CLI
  • API
  • Key prefixes
  • Production best practices
  • Shared responsibility
  • Technical overviews
  • Terminology and concepts
  • Tailscale messages
  • GitHub ↗
• Get Support
  • Troubleshooting
  • Support options
  • Contact support ↗
  • Generate a bug report
• Resources
  • Changelog ↗
  • Comparisons ↗
  • Release stages
  • Security ↗
  • Tailscale Community Projects
  • Versions
  • Use cases
  • Invite only features

Getting started

• What is Tailscale?
• What is a tailnet?
• What are these100.x.y.z addresses?

Deploying Tailscale

• Can I use Tailscale alongside other VPNs?
• I can't install Tailscale. How can I connect?
• What firewall ports should I open to use Tailscale?

Reliability

• What happens if the coordination server is down?
• Is my traffic routed through your servers?

Learn more abouthow Tailscale works.

Security and privacy

• Can Tailscale decrypt my traffic?
• If I use Tailscale on my work device, will my personal devices be visible to my co-workers?

Learn more about Tailscalesecurity.

Other

• Does Tailscale support IPv6?
• Why is MagicDNS fetching records on port433?
• Do admin console sessions expire?
• What is STUN?