Share a local development server with the internet

Last validated: May 18, 2026View as Markdown

Sometimes you need to share a local development server with someone outside your Tailscale network. For example, a client reviewing a prototype, a contractor testing an integration, or an external service delivering webhooks. Tailscale Funnel lets you expose a local port to the public internet over a stable HTTPS URL, without configuring port forwarding, DNS records, or a public IP address on your device.

Tailscale Funnel exposes your local port to the public internet. Anyone with the URL can access it. Do not use Funnel to expose services that contain sensitive data or that are not intended for public access.

Make sure you have MagicDNS and HTTPS certificates enabled for your tailnet. Both are required for Funnel and are enabled by default for new tailnets.
Make sure your local development server is running and listening for requests.
Make sure you enable Funnel.
Run the tailscale funnel command, replacing 3000 with the port your development server is listening on:
```
tailscale funnel 3000
```
You may get a prompt to enable Funnel at this point.
```
Funnel is not enabled on your tailnet. Contact your administrator.
```
Tailscale Funnel proxies public HTTPS traffic to your local port and automatically provisions a TLS certificate. The output shows the public URL anyone can use to access your development server:
```
Available on the internet:

https://my-device.tailnet-name.ts.net/
|-- proxy http://127.0.0.1:3000
```
Your development server is now publicly accessible at that URL over HTTPS.
Copy the https://*.ts.net URL from the tailscale funnel output and share it with whoever needs access. They do not need Tailscale installed. The URL is reachable from any browser or HTTP client on the internet.

Use CTRL+C in the terminal running tailscale funnel to exit.