Headscale

Headscale is an open-source implementation of the Tailscale control server that you can host on your own server. Between nodes in the network, Wireguard works as an exchange point for common keys, the client assigns IP addresses and sets boundaries between users. It is intended to create a single Tailnet (Tailscale network) for individual users or small open source organizations.

HE

juanfont · VPN & Networking

STARS45.2K
FORKS2.6K
COMMITS4.2K
CONTRIBUTORS248
VERSIONv1-ogen-backup-0e77a212b
UPDATEDtoday
GoWireguardMesh VpnBSD / ISC

Common commercial products in this category: NordVPN, Cisco AnyConnect, Zscaler

What can it do?
  • You can host Tailscale control server on your own server.
  • You can set up a structure that manages client IP addresses and provides a Wireguard key exchange.
  • You can navigate network routes by sharing machines between users.
User reviews
  • ↑ PositiveHacker News

    Headscale: Open-source implementation of the Tailscale control server

    “Of course they do -- that's why I use them. I don't have to. > Lack of “feature parity” is a strange term for something that completely replicates a third party service but requires self-hosting. It doesn't completely replicate it though, does it? No iOS app, no file sending --…”

  • • NeutralHacker News

    Headscale: Open-source implementation of the Tailscale control server

    “You buy a Tailscale contract for the same reason you buy a Red Hat contract. If something goes wrong, and you need to fix it fast , their experts will work on that, not yourself. Also, Tailscale offers OAuth through large corporate providers; I'm not sure Headscale is going to…”

Verified against README · Oct 26, 2026 · source

My note

Alternative pages

More in: VPN & Networking