Technical overviews
Explore the topics in this section for in-depth learning about common Tailscale concepts.
About WireGuard
Learn more about the encrypted networking protocol that Tailscale is built upon.
Tailscale encryption
Learn about Tailscale's use of encryption.
Direct and relayed connections
Learn about direct connections and relayed connections in Tailscale.
How Tailscale assigns an IP address
Learn how Tailscale assigns IP addresses and how to manage them.
Tailscale and the OSI model
Learn how Tailscale relates to the different layers of the OSI model.
Smaller binaries for embedded devices
Learn how to build smaller Tailscale binaries that takes up a minimal amount of disk space.
Kernel vs. netstack subnet routing & exit nodes
Learn about kernel mode and userspace mode and how each one works with subnet routers and exit nodes.
Userspace networking mode
Learn about running Tailscale where you don't have access to create a VPN tunnel device, which is common in container environments.
Node keys
Learn how nodes join a tailnet domain using node keys.
Protect your SSH servers
Lean how to protect your SSH servers by using Tailscale SSH.
Tailnet lock white paper
Learn in-depth details about Tailnet lock to verify that nodes are not added to your tailnet without being signed by trusted nodes in your tailnet.
DERP servers
Learn about Taailscale's globally distributed DERP relay servers.
Zero Trust Networking
Learn how zero trust networks are used to secure private networks.
IPv4 vs. IPv6 FAQ
Learn in-depth details about IPv4 and IPv6.