Replace site-to-site VPNs with Tailscale and WireGuard

A site-to-site VPN (virtual private network) transparently forwards network traffic between two or more local networks. Devices or virtual machines on one of those networks can access services on all the other subnets, without needing to install any software on the device itself.

Examples of common use cases for site-to-site VPNs include:

• Connecting physical offices to the cloud.
• Linking VPCs (virtual private clouds) across regions.
• Linking between different cloud providers (such as Google to AWS).
• Sharing servers or APIs with external suppliers, partners, or contractors.

Examples of common site-to-site VPN providers and platforms include Amazon Web Services (AWS) VPN, Google Cloud Platform (GCP) VPN, Cisco or Palo Alto Networks hardware, and Linux devices configured for IPsec.

Use Tailscale and WireGuard as a site-to-site VPN

You can use Tailscale with WireGuard to replace all these traditional site-to-site configurations with a secure, high-performance mesh network.

To get started, configure a Tailscale subnet router in each location. Tailscale handles all the key management and routing needed to create a multi-site mesh network automatically.