WireGuard® is a modern and fast encrypted networking protocol that offers a number of performance benefits over traditional VPNs and TLS. Among …
Access control lists (ACLs) restrict who can access which nodes on your network. ACLs can be defined in the admin console or the Tailscale API. …
This feature is available on Windows, Mac, and Linux for Tailscale v0.98.197 and up. If you don’t see this option, you may need to update …
If you’re migrating from a traditional office networks or a centralized VPN concentrator, you might find you have external servers that …
Device authorization is a feature that allows Tailscale network administrators to review and approve new devices before they can join the …
By default, Tailscale provides each device with a unique, stable IP address. However, IP addresses aren’t very memorable, and can be …
Tailscale relies on your existing identity provider to authenticate users. Any authentication settings from your identity provider are …
Exit nodes are a feature available in Tailscale v1.6 or greater. Exit nodes will have no effect on older versions. Update to v1.6 to use exit …
Tailscale makes it easy to connect to your network by providing you with a stable IP address for each node (a device or a server). These …
Tailscale networks are based on your email address domain name. If you signed up as david@example.com, only users with an @example.com email …
As a security feature, users need to periodically reauthenticate on each of their devices. The default expiration period depends on your domain …
The mechanism by which nodes can join a domain is enforced by machine certificates. When a new device tries to join the Tailscale network, we …
On Tailscale, machines are distinguishable by a 100.x.y.z IP address, and by a machine name. The machine name, shown throughout the admin panel …
Magic DNS automatically registers DNS names for devices in your network. If you add a new webserver called my-server to your network, you no …
Pre-authentication keys (“auth keys”) allow you to register new nodes without doing an interactive login. This is most useful when …
Tailscale’s services feature allows you to monitor and easily connect to the services running on machines in your Tailscale network. …
Sharing lets you give another Tailscale user access to a private device within your network, without exposing it publicly. This can be helpful …
Tailscale works best when you install Tailscale on every client, server, or VM in your organization. That way, traffic is end-to-end encrypted, …
Taildrop is a feature that makes it easy to send files between your personal devices on a Tailscale network. Like all traffic sent over …
Tailscale offers an API to let you automate various aspects of your network. You can find documentation for the API on GitHub → Authentication …
Tailscale ships with a built-in CLI that you can use to get information about your network and troubleshoot issues. Using the CLI Command …