Use Grafana with Tailscale

Tailscale and Grafana can work together in a variety of ways. For example, you can secure access to Grafana dashboards, use Tailscale as an authentication provider, or create Grafana dashboards to monitor your Tailscale network (known as a tailnet).

Secure Grafana dashboards with Tailscale

Use Tailscale to secure remote access to Grafana dashboards. You can host your Grafana server within your tailnet to avoid exposing Grafana data to the public internet and control access to dashboards using access control policies.

Authenticate Grafana users using Tailscale

Configure Grafana to use Tailscale as its authentication mechanism using Tailscale's open source Grafana proxy (proxy-to-grafana). Tailscale's Grafana proxy identifies users based on their Tailscale identity and uses Grafana's AuthProxy to map each user's Tailscale identity to the corresponding Grafana user.

Monitor your tailnet with Grafana

Create a Grafana dashboard to monitor Tailscale client metrics, such as subnet routes, device health, and connectivity data. You can use the data to:

• Gain insights into how your tailnet is performing.
• Identify connectivity issues between devices.
• Track bandwidth usage and plan for capacity needs.