tailscale
An open-source router that you can manage from a browser, a terminal CLI, or directly from your AI agents (Claude Desktop, OpenCode, Cline, GitHub Copilot). Born as a router-on-a-stick for the Le Potato (or any ARM SBC running Armbian/Ubuntu), it also installs and runs on x86 — mini-PCs, thin clients, and VMs — where it adapts the network topology to however many NICs the box actually has. Manages 802.1Q VLANs, DHCP, DNS, firewall rules, static routes, and VPN (Tailscale, WireGuard, Nebula) — all from a browser, over SSH, or through a standard MCP server. Still a potato at heart either way.
Related contents:
Thundering Herd replication and Thanos Snap durability, together at last.
Thundersnap is a collection of new and old ideas in distributed filesystem design. It’s named after the primary two ways this early version is likely to fail: the thundering herd (its mesh replication protocol) and the Thanos Snap (which is likely to lose roughly half your data).
Related contents:
OpenGraph Collector for Tailscale.
TailscaleHound is a BloodHound OpenGraph collector for Tailscale. It collects tailnet users, devices, groups, tags, ACLs, grants, SSH rules, routes, app connectors, services, invites, webhooks, and related control-plane metadata, then emits a BloodHound-compatible OpenGraph JSON file.
A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations.
Easy Tailscale to WireGuard bridge in a container.
A simple Docker container app which allows connecting existing WireGuard hosts to the Tailscale network, in case the device running WireGuard is locked in and/or does not support Tailscale binaries.
Related contents:
A lightweight proxy manager built on Tailscale's tsnet library that enables multiple HTTPS services on a Tailnet
A Python-based Flask application to monitor the health of devices in a Tailscale network. The application provides endpoints to check the health status of all devices, specific devices, and lists of healthy or unhealthy devices.
Very simple proxy with Tailscale. Fast, simple and easy for virtual services in Tailscale.
TsDProxy simplifies the process of securely exposing services and Docker containers to your Tailscale network by automatically creating Tailscale machines for each tagged container. This allows services to be accessible via unique, secure URLs without the need for complex configurations or additional Tailscale containers.
Related contents:
An unofficial GUI wrapper around the Tailscale CLI client.
Trayscale is an unofficial GUI interface for the Tailscale daemon particularly for use on Linux, as no official Linux GUI client exists. It provides a basic system tray icon and a fairly comprehensive UI with support for many of Tailscale's features.
An open source, self-hosted implementation of the Tailscale control server.
Headscale aims to implement a self-hosted, open source alternative to the Tailscale control server. Headscale's goal is to provide self-hosters and hobbyists with an open-source server they can use for their projects and labs. It implements a narrow scope, a single Tailnet, suitable for a personal use, or a small open-source organisation.
Related contents:
- Ep 13: Cyberdeck Cyberwhat Selfhosted VPN networks and is Wireguard Hard @ Linux Prepper (Episode 13 Shownotes - Cyberdeck Cyberwhat and is Wireguard Hard @ Learning Together).
- Déployez un VPN avec Headscale : une version auto-hébergée du serveur Tailscale @ IT-Connect :fr:.
- Tailscale : VPN mesh WireGuard et control plane souverain @ DevSecOps :fr:.
- I replaced Tailscale's control server with Headscale, and my devices didn't notice @ XDA.