FAQ

• Can I use Tailscale alongside other VPNs?

  It depends. In most cases, you can’t use Tailscale alongside other VPNs. In theory, it should work. Tailscale only routes a small subset of …

• Can Tailscale decrypt my traffic?

  No. Devices running Tailscale only exchange their public keys. Private keys never leave the device. All traffic is end-to-end encrypted, always.

• Connecting when you can't install Tailscale

  In most cases, we recommend installing Tailscale directly on devices you want to connect to. It just works, and requires no configuration as …

• Enable IP forwarding on Linux

  Tailscale’s subnet and exit node features require that your relay device allows IP forwarding. For many distros such as Ubuntu, Debian, …

• If use Tailscale on my work device, can co-workers see my personal devices?

  Tailscale only connects you to other devices logged in to the same Tailscale network. If your co-workers don’t use Tailscale or use a …

• IPv4 vs. IPv6 FAQ

  This article attempts to resolve some of the most common misconceptions around IPv6. What is IPv6? IPv6 is the next generation of the Internet …

• Is my traffic routed through your servers?

  No. Tailscale routes traffic over the shortest path possible. In most cases, this is a direct, peer-to-peer connection. In cases where a direct …

• Keep Tailscale running when I'm not logged in to my computer

  On Linux, Tailscale runs as the system, and is available even when no users are logged in. For other platforms Tailscale runs as the logged in …

• Overlapping IP ranges between locations

  Devices connecting via Tailscale IPs are always guaranteed to have unique 100.x.y.z IP addresses, regardless of which local network they are on. …

• pfSense settings to enable direct connections

  pfSense is an open source router and firewall platform built using FreeBSD. Tailscale clients behind a pfSense firewall can benefit from a …

• Tailscale IPv6 support

  Tailscale and WireGuard® fully support IPv6. Private IPv6 (“IPv6 inside the tunnel”) IPv6 connectivity always works on your private …

• Three ways to run Tailscale on macOS

  There are three ways to run Tailscale on macOS: The Mac App Store version, from https://apps.apple.com/ca/app/tailscale/id1475387142 A …

• Troubleshooting guide

  This article contains various suggestions and tips to help troubleshoot setup and connectivity issues. Email suggestions to …

• What are these 100.x.y.z addresses?

  Tailscale assigns each node on your network a unique 100.x.y.z address. This address stays stable for each node (a device or a server), which …

• What firewall ports should I open to use Tailscale?

  Nearly all of the time, you don’t need to open any firewall ports for Tailscale. Tailscale uses various NAT traversal techniques to safely …

• What happens if the coordination server is down?

  As described in our blog post about how Tailscale works, the coordination server is the single, centralized component of Tailscale’s …

• What is a tailnet?

  A tailnet is your private network. When you log in for the first time to Tailscale on your phone, laptop, desktop, or cloud VM, a tailnet is …

• What is hello.ipn.dev?

  hello.ipn.dev is a server administered by Tailscale staff to help new users test their network. It is added by default to every new network. …

• What is Tailscale?

  Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It …