TL;DR — Quick Summary

Tailscale creates a WireGuard mesh VPN with zero configuration. Connect devices across NATs, share with teammates, and access your homelab from anywhere.

Tailscale removes everything painful about VPNs. No port forwarding, no certificate management, no firewall rules. Install on each device, authenticate, and they can all reach each other — even behind the strictest NATs.

Installation

# Linux (one-line installer)
curl -fsSL https://tailscale.com/install.sh | sh

# macOS
brew install tailscale

# Start and authenticate
sudo tailscale up

# Check status
tailscale status

# Get your Tailscale IP
tailscale ip

Key Features

MagicDNS

Access any device by name instead of IP:

ssh user@desktop          # Instead of ssh user@100.64.0.2
curl http://homeserver    # Instead of http://100.64.0.3
ping laptop               # Works across the internet

Exit Nodes (Full VPN)

Route all internet traffic through a device:

# On the exit node (e.g., your home server):
sudo tailscale up --advertise-exit-node

# On the client (e.g., laptop at a café):
sudo tailscale up --exit-node=homeserver

Subnet Routes

Expose an entire local network through one device:

# Advertise your home LAN
sudo tailscale up --advertise-routes=192.168.1.0/24

# Now all tailnet devices can reach 192.168.1.x

Tailscale SSH

SSH without managing keys:

# Enable Tailscale SSH on the server
sudo tailscale up --ssh

# Connect from any tailnet device — no SSH keys needed
ssh user@server

Funnel (Public Access)

Expose a local service to the internet via Tailscale:

# Expose port 8080 publicly
tailscale funnel 8080

# Now accessible at https://yourdevice.tail1234.ts.net

Use Cases

ScenarioHow
Remote workAccess office servers from home
HomelabReach home services from anywhere
Team devShare staging servers securely
IoTConnect Raspberry Pis across sites
GamingLAN games across the internet
Self-hostingExpose services without port forwarding

Comparison

FeatureTailscaleWireGuardOpenVPNSshuttle
SetupZero configManualComplexSSH needed
TopologyMesh (P2P)AnyHub-spokePoint-to-point
NAT traversalAutomaticManualManualSSH relay
MagicDNSYesNoNoNo
SSOYesNoOptionalNo
ACLsBuilt-inManualManualNo
Free tier100 devicesFree/OSSFree/OSSFree/OSS
Self-hostHeadscaleYesYesNo

Summary

  • Tailscale creates a WireGuard mesh VPN with zero configuration
  • Direct peer-to-peer connections — no traffic relay, low latency
  • MagicDNS for accessing devices by name across the internet
  • Exit nodes, subnet routes, Tailscale SSH, and Funnel for public access
  • Free for up to 100 devices; self-host with Headscale for full control