FAQ

• Can I use Tailscale alongside other VPNs?

  It depends. In most cases, you can’t use Tailscale alongside other VPNs. In theory, it should work. Tailscale only routes a small subset of …

• Can Tailscale decrypt my traffic?

  No. Devices running Tailscale only exchange their public keys. Private keys never leave the device. All traffic is end-to-end encrypted, always.

• Connecting when you can't install Tailscale

  In most cases, we recommend installing Tailscale directly on devices you want to connect to. It just works, and requires no configuration as …

• DNS Problems with internal services and DNS rebinding protection

  Some DNS servers have a feature called DNS rebinding protection. This can prevent a particular type of security issue but can impact the ability …

• Does it matter how I order my DNS resolvers?

  The short answer: no. The longer answer: it depends. If you’ve been managing network interfaces for a while, you might expect to be able to give …

• HIPAA compliance

  Tailscale understands the value you place on securing your data, including personal health information that may be subject to the Health …

• If I use Tailscale on my work device, can co-workers see my personal devices?

  Tailscale only connects you to other devices logged in to the same Tailscale network. If your co-workers don’t use Tailscale or use a …

• IPv4 vs. IPv6 FAQ

  This article attempts to resolve some of the most common misconceptions around IPv6. What is IPv6? IPv6 is the next generation of the Internet …

• Is my traffic routed through your servers?

  No. Tailscale routes traffic over the shortest path possible. In most cases, this is a direct, peer-to-peer connection. In cases where a direct …

• Keep Tailscale running when I'm not logged in to my computer

  On Linux, Tailscale runs as the system, and is available even when no users are logged in. For other platforms Tailscale runs as the logged in …

• Overlapping IP ranges between locations

  Devices connecting via Tailscale IPs are always guaranteed to have unique 100.x.y.z IP addresses, regardless of which local network they are on. …

• pfSense settings to enable direct connections

  pfSense is an open source router and firewall platform built using FreeBSD. Tailscale clients behind a pfSense firewall can benefit from a …

• Tailscale IPv6 support

  Tailscale and WireGuard® fully support IPv6. Private IPv6 (“IPv6 inside the tunnel”) IPv6 connectivity always works on your …

• Three ways to run Tailscale on macOS

  There are three ways to run Tailscale on macOS: The Mac App Store version, from https://apps.apple.com/ca/app/tailscale/id1475387142 A …

• Troubleshooting guide

  This article contains various suggestions and tips to help troubleshoot setup and connectivity issues. If you have additional issues, contact …

• Using Tailscale with your firewall

  Most of the time, Tailscale should work with your firewall out of the box. Thanks to NAT traversal, nodes in your tailnet can connect directly …

• What are these 100.x.y.z addresses?

  Tailscale assigns each node on your network a unique 100.x.y.z address. This address stays stable for each node (a device or a server), which …

• What firewall ports should I open to use Tailscale?

  Nearly all of the time, you don’t need to open any firewall ports for Tailscale. Tailscale uses various NAT traversal techniques to safely …

• What happens if the coordination server is down?

  As described in our blog post about how Tailscale works, the coordination server is the single, centralized component of Tailscale’s …

• What is a tailnet?

  A tailnet is your private network. When you log in for the first time to Tailscale on your phone, laptop, desktop, or cloud VM, a tailnet is …

• What is hello.ts.net?

  hello.ts.net is a server administered by Tailscale staff to help new users test their network. hello.ts.net can only be accessed over Tailscale. …

• What is Tailscale?

  Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It …

• Why can't I use Tailscale with my network service provider Sunrise Communications?

  It appears that Sunrise Communications is blocking the Tailscale service. Specifically, Tailscale has been (incorrectly) flagged by …