CINXE.COM

<!DOCTYPE html><html><head><meta charSet="utf-8"/><title>Why Tailscale? | Tailscale</title><meta name="robots" content="index,follow"/><meta name="description" content="Tailscale is a secure and private, identity-based, infrastructure agnostic VPN with a flexible topology, resilient networking, and a streamlined setup."/><meta property="og:title" content="Why Tailscale? | Tailscale"/><meta property="og:description" content="Tailscale is a secure and private, identity-based, infrastructure agnostic VPN with a flexible topology, resilient networking, and a streamlined setup."/><meta property="og:url" content="https://tailscale.com/why-tailscale"/><meta property="og:image" content="https://tailscale.com/api/og-image?id=3d84da26-d651-4be4-86ce-ca9a0d0e729a"/><link rel="canonical" href="https://tailscale.com/why-tailscale"/><link rel="alternate" type="application/rss+xml" href="https://tailscale.com/blog/index.xml"/><link rel="alternate" type="application/rss+xml" href="https://tailscale.com/changelog/index.xml"/><link rel="alternate" type="application/rss+xml" href="https://tailscale.com/security-bulletins/index.xml"/><meta name="viewport" content="initial-scale=1.0, width=device-width, maximum-scale=1"/><link rel="icon" href="/favicon.png" type="image/png"/><link rel="icon" href="/favicon.svg" type="image/svg+xml"/><meta name="msapplication-TileColor" content="#492847"/><meta name="theme-color" content="#ffffff"/><script data-cfasync="false" async="" src="https://client-registry.mutinycdn.com/personalize/client/2717960877f6aef7.js"></script><script async="" src="https://bwa.marketplace.awsstatic.com/assets/partner.js"></script><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="Why Tailscale? | Tailscale"/><meta name="twitter:image" content="https://tailscale.com/api/og-image?id=3d84da26-d651-4be4-86ce-ca9a0d0e729a"/><meta name="twitter:description" content="Tailscale is a secure and private, identity-based, infrastructure agnostic VPN with a flexible topology, resilient networking, and a streamlined setup."/><meta name="twitter:site" content="@tailscale"/><meta name="next-head-count" content="24"/><link rel="preload" href="/_next/static/media/97a52bce187043ec-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/a34f9d1faa5f3315-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/336cc920156f222b.css" as="style"/><link rel="stylesheet" href="/_next/static/css/336cc920156f222b.css" data-n-g=""/><link rel="preload" href="/_next/static/css/9eee414ec9ffd447.css" as="style"/><link rel="stylesheet" href="/_next/static/css/9eee414ec9ffd447.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-32358132912b9db5.js" defer=""></script><script src="/_next/static/chunks/framework-2f437cbb805415a5.js" defer=""></script><script src="/_next/static/chunks/main-ff41db13914e2a8f.js" defer=""></script><script src="/_next/static/chunks/pages/_app-b7ac56134b8f7f98.js" defer=""></script><script src="/_next/static/chunks/3584-081985ce349769b0.js" defer=""></script><script src="/_next/static/chunks/1604-484ff9654ebda357.js" defer=""></script><script src="/_next/static/chunks/8795-8f725cdc513b97c8.js" defer=""></script><script src="/_next/static/chunks/7023-7d6d1e0d706958e4.js" defer=""></script><script src="/_next/static/chunks/8035-9215264ce9b58e89.js" defer=""></script><script src="/_next/static/chunks/8100-98b2867a0c4566e6.js" defer=""></script><script src="/_next/static/chunks/1566-75f64035ad5c0900.js" defer=""></script><script src="/_next/static/chunks/7007-68710207f4721455.js" defer=""></script><script src="/_next/static/chunks/9643-921a0b837e5e1498.js" defer=""></script><script src="/_next/static/chunks/2850-64a5a545da7666ae.js" defer=""></script><script src="/_next/static/chunks/5734-6e1b64f604106f61.js" defer=""></script><script src="/_next/static/chunks/5677-818e668698881dce.js" defer=""></script><script src="/_next/static/chunks/pages/%5B...slug%5D-264368f5ad6c840d.js" defer=""></script><script src="/_next/static/mz8O9WjSDaVV3kPB5sqDN/_buildManifest.js" defer=""></script><script src="/_next/static/mz8O9WjSDaVV3kPB5sqDN/_ssgManifest.js" defer=""></script><style id="__jsx-1535044592">:root{--font-inter:'__Inter_81dec9', '__Inter_Fallback_81dec9';--font-mdio:'__MDIOFont_8d6c39', '__MDIOFont_Fallback_8d6c39'}</style></head><body><div id="__next"><div class="z-[20000] flex min-h-[40px] w-full items-center justify-center p-2 px-10 text-center bg-heading-black text-white"><a class="group flex flex-wrap justify-center gap-x-4 text-sm tracking-tight" href="https://tailscale.com/events-webinars/replace-your-legacy-vpn">Upcoming Webinar: Replace your legacy VPN<span class="font-bold underline group-hover:no-underline">Sign up now</span></a></div><header class="left-0 right-0 top-0 z-[100] h-[60px] transition-colors duration-300 lg:h-[66px] sticky bg-transparent"><div class="is-wide container flex items-center justify-between py-4 lg:py-3"><div class="flex gap-[35px]"><a class="w-[110px] transition-colors duration-200 text-heading-black" title="Homepage" href="/"><svg class="transition-colors duration-200 " width="100%" height="100%" viewBox="0 0 110 20" fill="none" xmlns="http://www.w3.org/2000/svg"><ellipse cx="2.44719" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="9.79094" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="2.44719" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="17.1269" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="9.79094" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="17.1269" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="2.44719" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="9.79094" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="17.1269" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><path d="M34.3979 18.458C35.0907 18.458 35.6536 18.3933 36.3248 18.2637V15.7584C35.9134 15.9096 35.4588 15.9528 35.0258 15.9528C33.965 15.9528 33.5753 15.4344 33.5753 14.441V9.34402H36.3248V6.83875H33.5753V3.12403H30.5443V6.83875H28.5742V9.34402H30.5443V14.7217C30.5443 17.0974 31.8 18.458 34.3979 18.458Z" fill="#242424"></path><path d="M41.2747 18.458C42.8984 18.458 43.9809 17.9181 44.5222 17.0758C44.5655 17.443 44.6954 17.9397 44.8686 18.2421H47.5964C47.4449 17.7237 47.3366 16.903 47.3366 16.3631V10.4455C47.3366 8.005 45.583 6.62277 42.617 6.62277C40.3654 6.62277 38.6118 7.46507 37.6376 8.69611L39.3696 10.4023C40.149 9.5384 41.1448 9.08486 42.3572 9.08486C43.8294 9.08486 44.4789 9.58159 44.4789 10.3159C44.4789 10.9422 44.0459 11.3742 41.7077 11.3742C39.4562 11.3742 37.183 12.3028 37.183 14.8945C37.183 17.2918 38.9149 18.458 41.2747 18.458ZM41.8809 16.1687C40.7118 16.1687 40.1706 15.672 40.1706 14.7865C40.1706 14.009 40.8201 13.4907 41.9026 13.4907C43.6345 13.4907 44.1108 13.3827 44.4789 13.0155V13.9442C44.4789 15.1753 43.4397 16.1687 41.8809 16.1687Z" fill="#242424"></path><path d="M49.3069 5.39173H52.4677V2.5625H49.3069V5.39173ZM49.3718 18.2421H52.4028V6.83875H49.3718V18.2421Z" fill="#242424"></path><path d="M54.6109 18.2421H57.6418V2.90805H54.6109V18.2421Z" fill="#242424"></path><path d="M63.9416 18.458C67.2757 18.458 68.986 16.7087 68.986 14.8729C68.986 13.2099 68.1417 11.9789 65.3705 11.4821C63.4221 11.1366 62.2097 10.7046 62.2097 10.0351C62.2097 9.45201 62.9025 9.04166 64.0715 9.04166C65.1107 9.04166 65.9767 9.38722 66.6262 10.1431L68.553 8.52333C67.5788 7.31389 65.9767 6.62277 64.0715 6.62277C61.1489 6.62277 59.3303 8.17777 59.3303 10.0783C59.3303 12.1517 61.2354 13.0803 63.2922 13.4475C65.0025 13.7499 65.9551 14.0738 65.9551 14.8081C65.9551 15.4344 65.2839 15.9528 64.0066 15.9528C62.7509 15.9528 61.7767 15.3696 61.322 14.5058L58.7674 15.7152C59.3952 17.2702 61.5385 18.458 63.9416 18.458Z" fill="#242424"></path><path d="M75.7621 18.458C77.9271 18.458 79.4859 17.5942 80.6549 15.6504L78.2302 14.4194C77.7755 15.3265 77.0395 15.9528 75.7621 15.9528C73.8353 15.9528 72.7961 14.3978 72.7961 12.5188C72.7961 10.6399 73.9003 9.12805 75.7621 9.12805C76.9312 9.12805 77.7106 9.75437 78.1652 10.7046L80.6116 9.40882C79.7889 7.61625 78.1652 6.62277 75.7621 6.62277C71.8003 6.62277 69.7652 9.5168 69.7652 12.5188C69.7652 15.78 72.2333 18.458 75.7621 18.458Z" fill="#242424"></path><path d="M85.4829 18.458C87.1067 18.458 88.1891 17.9181 88.7304 17.0758C88.7737 17.443 88.9036 17.9397 89.0768 18.2421H91.8046C91.6531 17.7237 91.5448 16.903 91.5448 16.3631V10.4455C91.5448 8.005 89.7912 6.62277 86.8252 6.62277C84.5737 6.62277 82.8201 7.46507 81.8458 8.69611L83.5778 10.4023C84.3572 9.5384 85.353 9.08486 86.5654 9.08486C88.0376 9.08486 88.6871 9.58159 88.6871 10.3159C88.6871 10.9422 88.2541 11.3742 85.9159 11.3742C83.6644 11.3742 81.3912 12.3028 81.3912 14.8945C81.3912 17.2918 83.1231 18.458 85.4829 18.458ZM86.0891 16.1687C84.9201 16.1687 84.3788 15.672 84.3788 14.7865C84.3788 14.009 85.0283 13.4907 86.1108 13.4907C87.8427 13.4907 88.319 13.3827 88.6871 13.0155V13.9442C88.6871 15.1753 87.6479 16.1687 86.0891 16.1687Z" fill="#242424"></path><path d="M93.3263 18.2421H96.3573V2.90805H93.3263V18.2421Z" fill="#242424"></path><path d="M103.631 18.458C105.861 18.458 107.658 17.5726 108.654 15.996L106.359 14.5274C105.753 15.4776 104.952 15.996 103.631 15.996C102.138 15.996 101.055 15.1753 100.774 13.5771H109.39V12.5188C109.39 9.5168 107.55 6.62277 103.61 6.62277C99.8643 6.62277 97.8293 9.5384 97.8293 12.5404C97.8293 16.8167 101.055 18.458 103.631 18.458ZM100.882 11.2014C101.358 9.75437 102.354 9.08486 103.675 9.08486C105.168 9.08486 106.078 9.97034 106.381 11.2014H100.882Z" fill="#242424"></path></svg></a><nav class="relative hidden lg:flex lg:gap-6"><div class="fixed bottom-0 left-0 right-0 z-[90] h-screen w-full transition duration-200 pointer-events-none opacity-0 top-[120px] bg-transparent"></div><div role="button" aria-haspopup="true" tabindex="0" class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Product"}"><span>Product</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></div><div role="button" aria-haspopup="true" tabindex="0" class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Solutions"}"><span>Solutions</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></div><a class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Enterprise"}" href="/enterprise"><span>Enterprise</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></a><a class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Customers"}" href="/customers"><span>Customers</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></a><a class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Docs"}" href="/kb/1017/install"><span>Docs</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></a><a class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Blog"}" href="/blog"><span>Blog</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></a><a class="group relative text-[14px] font-medium leading-normal tracking-[-0.28px] transition-colors duration-300 text-heading-black/80 hover:text-heading-black/100" data-track="Link Clicked" data-track-properties="{"label": "Pricing"}" href="/pricing"><span>Pricing</span><div class="absolute bottom-[-6px] left-[25%] right-0 z-[100] flex h-[3px] w-[50%] items-center justify-center rounded-[5px] opacity-0 group-hover:opacity-100 bg-heading-black/80"></div></a></nav></div><div class="hidden lg:flex lg:items-center lg:gap-[25px]"><a class="t-14 font-medium opacity-80 transition-colors duration-300 text-heading-black/80 hover:text-black/100" data-track="Link Clicked" data-track-properties="{"label": "Download"}" href="/download">Download</a><a class="t-14 font-medium opacity-80 transition-colors duration-300 text-heading-black/80 hover:text-black/100" data-track="Link Clicked" data-track-properties="{"label": "Log in"}" href="https://login.tailscale.com/welcome">Log in</a><a data-track="Link Clicked" data-track-properties="{"label": Get started - it's free!}" href="https://login.tailscale.com/start"><div class="inline-flex shrink-0 border transition-colors duration-200 w-full xs:w-auto items-center justify-center text-center relative focus:outline-none group transition-all overflow-hidden font-body font-medium rounded-lg group gap-[11px] py-2 px-[17px] leading-[1.46] tracking-[-0.16px] transition-colors duration-300 bg-heading-black border-heading-black text-white hover:bg-black-4 hover:border-black-4 "><div>Get started - it's free!</div></div></a></div><button type="button" aria-label="Open Menu" class="flex lg:hidden"><svg width="55" height="30" viewBox="0 0 55 30" fill="none" xmlns="http://www.w3.org/2000/svg"><rect class="fill-black-4" x="0.5" y="0.5" width="54" height="29" rx="5.5"></rect><line class="origin-center transition duration-300 rotate-0" x1="17" y1="11.5" x2="38" y2="11.5" stroke="white"></line><line class="origin-center transition duration-300 rotate-0" x1="17" y1="17.5" x2="38" y2="17.5" stroke="white"></line><rect x="0.5" y="0.5" width="54" height="29" rx="5.5" stroke="#242424"></rect></svg></button></div></header><div class="fixed inset-0 z-[90] h-full w-full overflow-auto bg-white px-5 pb-20 pt-24 transition-opacity duration-200 will-change-[opacity] lg:hidden pointer-events-none opacity-0"><div class="space-y-[22px]"><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><div class="t-20 flex w-full items-center justify-between font-medium "><span>Product</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 rotate-90 bg-black-4 text-white"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></div><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><div class="t-14 relative z-[10] mb-2 text-[#706E6D] lg:mb-[15px] lg:ml-3">Meet Tailscale</div><ul><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "How it works"}" href="/blog/how-tailscale-works"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">How it works</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Why Tailscale"}" href="/why-tailscale"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Why Tailscale</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "WireGuard® for Enterprises"}" href="/wireguard-vpn"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">WireGuard® for Enterprises</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Bring Tailscale to Work"}" href="/bring-tailscale-to-work"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Bring Tailscale to Work</div></div></a></li></ul></div><div class="flex-1 lg:min-w-[266px]"><div class="t-14 relative z-[10] mb-2 text-[#706E6D] lg:mb-[15px] lg:ml-3">Explore</div><ul><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Integrations"}" href="/integrations"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Integrations</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Features"}" href="/features"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Features</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Compare Tailscale"}" href="/compare"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Compare Tailscale</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Community Projects"}" href="/community/community-projects"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Community Projects</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Partnerships"}" href="/partnerships"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Partnerships</div></div></a></li></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><div class="t-20 flex w-full items-center justify-between font-medium "><span>Solutions</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 rotate-90 bg-black-4 text-white"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></div><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><div class="t-14 relative z-[10] mb-2 text-[#706E6D] lg:mb-[15px] lg:ml-3">By use-case</div><ul><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Remote Access"}" href="/use-cases/remote-access"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Remote Access</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Site-to-site Networking"}" href="/use-cases/site-to-site-networking"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Site-to-site Networking</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Multi-Cloud Networking"}" href="/use-cases/multi-cloud-networking"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Multi-Cloud Networking</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Kubernetes Networking"}" href="/use-cases/kubernetes"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Kubernetes Networking</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Edge & IoT Deployments"}" href="/use-cases/iot"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Edge & IoT Deployments</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Zero Trust Networking"}" href="/use-cases/zero-trust-networking"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Zero Trust Networking</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "AI Workloads"}" href="/use-cases/ai"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">AI Workloads</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Secure SaaS"}" href="/use-cases/secure-saas"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Secure SaaS</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Business VPN"}" href="/use-cases/business-vpn"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Business VPN</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Homelab"}" href="/use-cases/homelab"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Homelab</div></div></a></li></ul></div><div class="flex-1 lg:min-w-[266px]"><div class="t-14 relative z-[10] mb-2 text-[#706E6D] lg:mb-[15px] lg:ml-3">By role</div><ul><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "DevOps"}" href="/solutions/devops"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">DevOps</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "IT"}" href="/solutions/it"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">IT</div></div></a></li><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Security"}" href="/solutions/security"><div class="flex items-center gap-2"><div class="t-16 relative z-[10] text-heading-black">Security</div></div></a></li></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/enterprise"><span>Enterprise</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><ul></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/customers"><span>Customers</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><div class="t-14 relative z-[10] mb-2 text-[#706E6D] lg:mb-[15px] lg:ml-3">Nav heading here</div><ul><li class="group relative whitespace-nowrap"><a class="relative z-[10] inline-block w-full rounded-lg px-1 py-2 hover:bg-[#F9F7F6] lg:p-[12px]" data-track="Link Clicked" data-track-properties="{"label": "Title here"}" href="https://tailscale.com/customers"><div class="flex items-center gap-2"><img alt="Alt text " loading="lazy" width="300" height="120" decoding="async" data-nimg="1" class="relative z-[10] brightness-100 saturate-100 transition duration-200 lg:brightness-[1.1] lg:saturate-0 lg:brightness-100 lg:saturate-100" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 300 120'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/a06dc612b1e3e4f4df53a72030002600639a8738-300x120.png?w=384&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/a06dc612b1e3e4f4df53a72030002600639a8738-300x120.png?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/a06dc612b1e3e4f4df53a72030002600639a8738-300x120.png?w=640&q=75&fit=clip&auto=format"/><div class="t-16 relative z-[10] text-heading-black">Title here</div></div><div class="t-14 relative z-[10] mt-1 line-clamp-2 !font-normal !leading-[1.28] text-heading-black/80">How Cribl Enables Secure Work From Anywhere with Tailscale</div></a></li></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/kb/1017/install"><span>Docs</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><ul></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/blog"><span>Blog</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><ul></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/pricing"><span>Pricing</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"><div class="left-[-110px] top-[57px] z-[100] flex flex-col justify-between gap-8 rounded-2xl bg-white py-[30px] will-change-transform lg:absolute lg:flex-row lg:gap-[50px] lg:border lg:px-[30px] xl:left-[-40px]" style="opacity:0"><div class="flex-1 lg:min-w-[266px]"><ul></ul></div></div></div></div><div class="relative overflow-hidden border-b border-stroke-grey pb-6 "><a class="t-20 flex w-full items-center justify-between font-medium " href="/download"><span>Download</span><span class="flex h-[22px] w-[22px] items-center justify-center rounded-full text-black transition-transform duration-300 -rotate-0 bg-grey-2"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83344 7.82482L8.83656 4.99835L5.83344 2.17188L5.24469 2.72658L7.24156 4.60599H1.16406V5.3907H7.24156L5.24469 7.27011L5.83344 7.82482Z" fill="currentColor"></path></svg></span></a><div class="flex flex-col transition duration-300 will-change-[height] h-0 opacity-0"></div></div></div><a class="mt-[42px] block" data-track="Link Clicked" data-track-properties="{"label": "Get started - it's free!"}" href="https://login.tailscale.com/start"><div class="inline-flex shrink-0 border transition-colors duration-200 w-full xs:w-auto items-center justify-center text-center relative focus:outline-none group transition-all overflow-hidden font-body font-medium rounded-lg group gap-[11px] py-2 px-[17px] leading-[1.46] tracking-[-0.16px] !w-full py-3 bg-heading-black border-heading-black text-white hover:bg-black-4 hover:border-black-4 "><div>Get started - it's free!</div></div></a><a class="mt-[15px] block" data-track="Link Clicked" data-track-properties="{"label": "Login"}" href="https://login.tailscale.com/welcome"><div class="inline-flex shrink-0 border transition-colors duration-200 w-full xs:w-auto items-center justify-center text-center relative focus:outline-none group transition-all overflow-hidden font-body font-medium rounded-lg group gap-[11px] py-2 px-[17px] leading-[1.46] tracking-[-0.16px] !w-full py-3 bg-grey-3 border-grey-3 text-heading-black"><div>Login</div></div></a><div class="t-14 mx-auto mt-[55px] max-w-[264px] text-center text-black-4/60">WireGuard is a registered trademark of Jason A. Donenfeld.</div><div class="mt-[35px] flex flex-wrap justify-center gap-[14px]"><a class="t-16 !leading-[1.05] underline underline-offset-4" href="/terms">Terms of Service</a><a class="t-16 !leading-[1.05] underline underline-offset-4" href="/privacy-policy">Privacy Policy</a></div><div class="mt-[60px] flex items-center justify-center gap-[8px]"><span class="scale-[1.1] text-heading-black transition-colors duration-300 hover:text-red-1"><svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><rect y="0.988281" width="28" height="28" rx="14" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.03169 9L13.0509 15.0672L8 20H9.13675L13.5587 15.6812L17.1317 20H21L15.6985 13.5916L20.3997 9H19.263L15.1906 12.9775L11.9001 9H8.03169ZM9.70337 9.75698H11.4805L19.3281 19.2429H17.551L9.70337 9.75698Z" fill="white"></path></svg></span><span class="scale-[1.1] text-heading-black transition-colors duration-300 hover:text-red-1"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.21875" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M12.434 19.6598L12.4179 14.8081H10.3008V12.7289H12.4179V11.3427C12.4179 9.47188 13.5974 8.57031 15.2966 8.57031C16.1106 8.57031 16.8101 8.62983 17.014 8.65643V10.6115L15.8355 10.612C14.9114 10.612 14.7324 11.0433 14.7324 11.6762V12.7289H17.3577L16.652 14.8081H14.7324V19.6598H12.434Z" fill="#fff"></path></svg></span><span class="scale-[1.1] text-heading-black transition-colors duration-300 hover:text-red-1"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.439453" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.68685 18.6518H10.8825V11.5871H8.68685V18.6518Z" fill="white"></path><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.50195 9.34036C8.50195 10.0352 9.07976 10.6143 9.77312 10.6143C10.4896 10.6143 11.0443 10.0584 11.0443 9.34036C11.0443 8.64547 10.4665 8.06641 9.77312 8.06641C9.07976 8.06641 8.50195 8.64547 8.50195 9.34036Z" fill="white"></path><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M16.8917 18.6518H19.0873V14.7836C19.0873 12.8843 18.6713 11.425 16.4525 11.425C15.3894 11.425 14.6729 12.0041 14.3724 12.56H14.3493V11.5871H12.2461V18.6518H14.4418V15.1542C14.4418 14.2509 14.6267 13.3475 15.7592 13.3475C16.8686 13.3475 16.8917 14.413 16.8917 15.2237V18.6518Z" fill="white"></path></svg></span><span class="scale-[1.1] text-heading-black transition-colors duration-300 hover:text-red-1"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.658203" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M19.6754 11.46C19.5368 10.5863 19.121 9.98138 18.1506 9.84696C16.6258 9.57813 14.2693 9.57812 14.2693 9.57812C14.2693 9.57812 11.9128 9.57813 10.388 9.84696C9.4177 9.98138 8.93254 10.5863 8.86323 11.46C8.72461 12.3337 8.72461 13.6106 8.72461 13.6106C8.72461 13.6106 8.72461 14.8876 8.86323 15.7613C9.00185 16.635 9.4177 17.2399 10.388 17.3743C11.9128 17.6432 14.2693 17.6432 14.2693 17.6432C14.2693 17.6432 16.6258 17.6432 18.1506 17.3743C19.121 17.1727 19.5368 16.635 19.6754 15.7613C19.814 14.8876 19.814 13.6106 19.814 13.6106C19.814 13.6106 19.814 12.3337 19.6754 11.46ZM12.8831 15.6269V11.5944L16.3486 13.6106L12.8831 15.6269Z" fill="white"></path></svg></span></div><div class="t-14 mx-auto mt-10 max-w-[264px] text-center text-black-4/60"> © 2025 Tailscale Inc. All rights reserved. Tailscale is a registered trademark of Tailscale Inc.</div></div><main class="mt-[-60px] lg:mt-[-66px]"><section class="bg-white py-20 md:pb-[95px] md:pt-44"><div class="container"><div class="mx-auto w-full max-w-[570px] text-center"><h1 class="t-72 font-medium">Why Tailscale?</h1><div class="t-b20 mt-[30px] text-heading-black opacity-80"><div class="content-prose "><p>Tailscale is a <a target="" rel="noreferrer" href="/why-tailscale#secure-and-private">secure and private</a>, <a target="" rel="noreferrer" href="/why-tailscale#identity-based">identity-based</a>, <a target="" rel="noreferrer" href="/why-tailscale#infrastructure-agnostic">infrastructure agnostic</a> network with a <a target="" rel="noreferrer" href="/why-tailscale#flexible-topology">flexible topology</a>, <a target="" rel="noreferrer" href="/why-tailscale#resilient-networking">resilient networking</a>, and a <a target="" rel="noreferrer" href="/why-tailscale#streamlined-setup">streamlined setup</a>.</p></div></div><div class="t-24 mt-10 text-center font-medium md:mt-[95px]">It's a network that just works.</div></div><div class="mt-8 flex justify-center md:mt-[72px]"><img _type="asset" alt="why tailscale" loading="lazy" width="732" height="112" decoding="async" data-nimg="1" class="md:block mx-auto" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 732 112'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/a8f5f94b3d137071e2bb84a5aee75813a5b3abff-732x112.svg?w=750&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/a8f5f94b3d137071e2bb84a5aee75813a5b3abff-732x112.svg?w=1920&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/a8f5f94b3d137071e2bb84a5aee75813a5b3abff-732x112.svg?w=1920&q=75&fit=clip&auto=format"/></div></div></section><section class="bg-grey-1 py-16 md:py-[160px]"><div class="container"><div class="mx-auto w-full max-w-[950px] rounded-2xl bg-white px-5 py-16 md:py-20"><div class="mx-auto w-full max-w-[730px]"><div class="content-prose blog prism underline-link black-bold prose"><div></div><h2 id="secure-and-private"><span class="group">Secure and private<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#secure-and-private" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><h5 id="tailscale-is-end-to-end-encrypted-so-we-cant-see-your-traffic"><span class="group"><strong>Tailscale is end-to-end encrypted, so we can’t see your traffic.</strong><a class="select-none opacity-0 !transition group-hover:opacity-100" href="#tailscale-is-end-to-end-encrypted-so-we-cant-see-your-traffic" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h5><p>Tailscale does not, and cannot, inspect your traffic. Tailscale uses <a target="" rel="noreferrer" href="https://www.wireguard.com/">WireGuard®</a> for end-to-end encryption of your traffic. Your private keys stay on your device — and the <a target="" rel="noreferrer" href="https://github.com/tailscale/tailscale">code is open source</a> so you can verify this independently. While Tailscale can’t observe the data transiting your tailnet, with <a target="" rel="noreferrer" href="https://tailscale.com/kb/1219/network-flow-logs/">network flow logs</a>, you still have visibility into what’s going on in your network, with metadata about connections being made; to introspect traffic leaving your network, you can use an <a target="" rel="noreferrer" href="https://tailscale.com/kb/1103/exit-nodes/">exit node</a> to route all traffic through a particular egress point.</p><p>We are transparent about <a target="" rel="noreferrer" href="https://tailscale.com/security">our company’s security practices</a>: we publish our internal <a target="" rel="noreferrer" href="https://tailscale.com/security-policies/">security policies</a> publicly, our <a target="" rel="noreferrer" href="https://tailscale.com/compliance">SOC 2 report</a> is available self-serve to all of our customers, and we publish <a target="" rel="noreferrer" href="https://tailscale.com/security-bulletins">security bulletins</a> about security vulnerabilities in Tailscale. We believe in building trust through transparency — by seeing where we are in terms of security, you can better evaluate our product and make an informed choice if Tailscale meets your needs.</p><p>Technological decisions in Tailscale were made with a security-first mindset. Tailscale’s core functionality is written in Go, a language with automatic memory management, which prevents a <a target="" rel="noreferrer" href="https://cwe.mitre.org/data/definitions/119.html">whole class of memory safety vulnerabilities</a>. </p><p>You don’t need to trust us to use Tailscale. Although we are responsible for managing the coordination server that distributes public keys and settings for your tailnet, with tailnet lock, <a target="" rel="noreferrer" href="https://tailscale.com/kb/1226/tailnet-lock/">your nodes can verify the public keys distributed by the coordination server before trusting them for network connectivity</a>.</p><p>Tailscale is architected with strong privacy in mind. Many features in Tailscale are built ‘the hard way’ so that we don’t collect unnecessary data — which means if we get compromised, your data isn’t breached. Tailscale <a target="" rel="noreferrer" href="https://tailscale.com/blog/magicdns-why-name/">runs a DNS server on every machine in your tailnet</a>, Tailscale Funnel <a target="" rel="noreferrer" href="https://tailscale.com/blog/tailscale-funnel-beta/">terminates TLS connections on your node</a>, and SSH session recording <a target="" rel="noreferrer" href="https://tailscale.com/kb/1246/tailscale-ssh-session-recording/">streams your sensitive data over your tailnet to another node in your network</a>.</p><p></p><p></p><div></div><h2 id="identity-based"><span class="group">Identity-based<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#identity-based" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><p><strong>Tailscale brings identity to the network layer, so that you can control access based on user identity, not only IP address.</strong></p><p>With Tailscale, rather than managing access controls based only on IP addresses, you can intuitively and flexibly define which users should have access to which services based on existing user identities, as well as groups, services, and subnet ranges. You can still detect anomalous behavior based on unusual access patterns in your <a target="" rel="noreferrer" href="https://tailscale.com/kb/1219/network-flow-logs/">connection logs</a>, with more context than you would have using just IP addresses.</p><p>You <a target="" rel="noreferrer" href="https://tailscale.com/kb/1013/sso-providers/">sign in to Tailscale with your identity provider</a>, such as Google, Microsoft Entra ID, Okta, or any <a target="" rel="noreferrer" href="https://tailscale.com/kb/1240/sso-custom-oidc">OIDC provider</a>. By using your existing identity provider, it’s one fewer password to remember (or lose) — but it also means you can require multi-factor authentication to access resources on your network. You can sync membership information to <a target="" rel="noreferrer" href="https://tailscale.com/kb/1180/sso-okta-scim">automatically grant or revoke access to users</a> as part of onboarding or offboarding, and grant groups from your identity provider access to specific resources.</p><p>Tailscale isn’t just used for managing user access to services — it can also be used to manage service to service access. You can control what an application can access based on its <a target="" rel="noreferrer" href="https://tailscale.com/kb/1068/acl-tags/">ACL tag service account identity</a>.</p><p>Since every Tailscale node has a user or service identity, every packet in your network is authenticated. That means you can use Tailscale to <a target="" rel="noreferrer" href="https://tailscale.com/kb/1005/multifactor-anything/">add multi-factor authentication to any legacy service</a>, use a Tailscale identity to <a target="" rel="noreferrer" href="https://tailscale.dev/blog/id-headers-tailscale-serve-flask">authenticate users to your service</a>, or use Tailscale as <a target="" rel="noreferrer" href="https://tailscale.com/blog/grafana-auth/">an auth proxy for a third-party service</a>.</p><p></p><p></p><div></div><h2 id="infrastructure-agnostic"><span class="group">Infrastructure-agnostic<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#infrastructure-agnostic" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><p><strong>Tailscale works where you need it. Any platform, any runtime, anywhere.</strong></p><p>Tailscale is hardware-agnostic — so you can make decisions about your hardware independently from decisions about your network. Tailscale creates an overlay network, using your existing network, which means it can be incrementally deployed. You don’t need to buy new network switches to use Tailscale, or to change your network architecture.</p><p>Tailscale allows you to connect from on-prem to cloud, <a target="" rel="noreferrer" href="https://tailscale.com/kb/1214/site-to-site/">site to site</a>, cloud to cloud, and cluster to cluster. By allowing you to peer directly between infrastructure, Tailscale enables you to define your network as you wish and use whatever infrastructure is best for you.</p><p>Tailscale is available on a <a target="" rel="noreferrer" href="https://tailscale.com/downloads">wide range of operating systems</a>, including Linux, Windows, macOS, iOS, Android, ARM and more. Tailscale runs everywhere you run, including VMs, containers, functions, and even <a target="" rel="noreferrer" href="https://tailscale.com/kb/1244/tsnet/">inside your applications</a>. Tailscale works with almost anything — it already runs on your <a target="" rel="noreferrer" href="https://tailscale.com/blog/steam-deck/">Steam Deck</a>, <a target="" rel="noreferrer" href="https://twitter.com/bradfitz/status/1585742267964624897">Tesla</a>, and <a target="" rel="noreferrer" href="https://tailscale.dev/blog/tailscale-sucks">robot vacuum cleaner</a>.</p><p></p><p></p><div></div><h2 id="flexible-topology"><span class="group">Flexible topology<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#flexible-topology" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><p><strong>Tailscale lets you segment your network and migrate to a zero-trust architecture.</strong></p><p>Tailscale connects users to services, and services to services, directly to each other — not through a concentrator — which means no choke point for your traffic, or single point of failure for your network. Configuration is managed centrally, but pushed to every device, so that <a target="" rel="noreferrer" href="https://tailscale.com/blog/how-tailscale-works/">access rules are enforced locally</a>. Without a concentrator, traffic isn’t throttled, and isn’t routed halfway across the world, so connections are low latency. And <a target="" rel="noreferrer" href="https://tailscale.com/kb/1054/dns/#nameservers">split tunneling</a> means that only traffic meant for the network even goes over the network.</p><p>Tailscale is mesh-capable, so although we recommend your devices connect peer-to-peer, you can also use <a target="" rel="noreferrer" href="https://tailscale.com/kb/1019/subnets/">subnet routers</a> to more easily and quickly connect existing subnets, VPCs, or embedded devices to your network. You’re free to use whatever network topology works best for you.</p><p>Access rules in Tailscale are <a target="" rel="noreferrer" href="https://tailscale.com/kb/1018/acls/">fine-grained</a>, so you can specify access for users, groups, and services to specific nodes, even including allowed ports and protocols. By default, all access is denied, so you can write access rules that follow the principle of least privilege. This effectively micro segments your network — so that each node is firewalled from and will not accept traffic from any other node unless explicitly allowed.</p><p>Tailscale helps you migrate to a zero trust network architecture: where being on a particular network or having a particular IP address isn’t sufficient for access, but instead, access is granted based on granular access controls. Even better, Tailscale lets you decouple the move to a new VPN from the move to a micro segmented network, so that you can make the move gradually and incrementally, at your own pace. Compare this to compute in the early 2010s: instead of moving your application to the cloud and simultaneously rearchitecting it, you could lift and shift and then gradually adopt containers and functions for new greenfield applications. Similarly, you can move to Tailscale, and then gradually restrict your access rules to further segment your network and adopt principles of zero trust.</p><p></p><p></p><div></div><h2 id="resilient-networking"><span class="group">Resilient networking<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#resilient-networking" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><p><strong>Tailscale connects your devices no matter where they are, across any infrastructure.</strong></p><p>Tailscale uses <a target="" rel="noreferrer" href="https://tailscale.com/blog/how-nat-traversal-works/">NAT traversal</a> and <a target="" rel="noreferrer" href="https://tailscale.com/kb/1232/derp-servers/">DERP relay servers</a> to connect to devices, even when they’re behind firewalls or NATs. Nearly all of the time, you don’t need to open any firewall ports to use Tailscale, and you can keep your network ingress and egress points locked down.</p><p>Tailscale stays connected and seamlessly transitions between networks — so you don’t have to log back in when you lose network connectivity. WireGuard uses a keepalive protocol to keep connections open, even if there is no traffic to a node on your network.</p><p>Tailscale makes your services easily addressable. Tailscale assigns your devices static IP addresses, which they maintain even as they move around on your network. You can access services based on their IPv4 or IPv6 addresses, or <a target="" rel="noreferrer" href="https://tailscale.com/kb/1081/magicdns/">DNS names</a>. You can even connect <a target="" rel="noreferrer" href="https://tailscale.com/kb/1201/4via6-subnets/">multiple subnets with overlapping IP ranges</a>, and have them all accessible on the same network.</p><p>Despite providing end-to-end encryption, Tailscale is performant, with <a target="" rel="noreferrer" href="https://tailscale.com/blog/more-throughput/">10Gb/s throughput on bare metal</a>. With such high throughput, most connections aren’t degraded — which means you don’t need to make a tradeoff between security and usability.</p><p></p><p></p><div></div><h2 id="streamlined-setup"><span class="group">Streamlined setup<a class="select-none opacity-0 !transition group-hover:opacity-100" href="#streamlined-setup" aria-hidden="true"> <svg class="inline" xmlns="http://www.w3.org/2000/svg" width="0.4em" height="0.4em" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 7h3a5 5 0 0 1 5 5 5 5 0 0 1-5 5h-3m-6 0H6a5 5 0 0 1-5-5 5 5 0 0 1 5-5h3"></path><line x1="8" y1="12" x2="16" y2="12"></line></svg></a></span></h2><p><strong>Tailscale can be set up by users in minutes, and deployed to servers programmatically.</strong></p><p>It’s frustratingly easy to set up Tailscale: download it and log in on any device, and you’re connected to your own private network. Invite your team to your network and get started with Tailscale, without needing to put down a credit card. Since it just works, your users don’t need to deal with it as often, and your IT team gets fewer support tickets.</p><p>Tailscale is built with developers in mind. Tailscale can be deployed to your network <a target="" rel="noreferrer" href="https://tailscale.com/kb/1085/auth-keys">programmatically</a>, with <a target="" rel="noreferrer" href="https://tailscale.com/kb/1215/oauth-clients/#scopes">fine-grained API scopes</a> — you can <a target="" rel="noreferrer" href="https://tailscale.com/kb/1245/set-up-servers/">set up a server</a> so that when it connects to the network, it already has access to only what it’s supposed to. Your <a target="" rel="noreferrer" href="https://tailscale.com/kb/1018/acls/">network access rules</a> are configured as code, so you can <a target="" rel="noreferrer" href="https://tailscale.com/kb/1204/gitops-acls/">manage them in git</a> or with <a target="" rel="noreferrer" href="https://tailscale.com/kb/infrastructure-as-code/">IaC tools</a>. You can even <a target="" rel="noreferrer" href="https://tailscale.com/blog/tsnet-virtual-private-services/">build Tailscale into your application</a>.</p><p>Tailscale makes the secure way, the easy way. WireGuard uses opinionated, modern cryptography with no user configurations, and no way to downgrade security. In Tailscale, access rules are default deny, and API keys automatically expire. Making security hard to mess up means there’s less mess to clean up.</p><p>A constant for network infrastructure is change. Tailscale is designed to work regardless of the shifts occurring in your network infrastructure. You can <a target="" rel="noreferrer" href="https://tailscale.com/kb/1337/acl-syntax#tests">validate that access rules don’t change your desired controls</a> over time. We make significant efforts to maintain backward compatibility with prior versions, to ensure versioning does not act as a blocker for your teams to produce their best work.</p></div></div></div></div></section></main><section class=" pb-[50px] pt-10 lg:pt-[175px] "><div class="is-wide container flex flex-col gap-6 md-large:flex-row"><div class="flex flex-1 flex-col justify-between rounded-[14px] bg-[#082429] overflow-hidden"><div class="relative z-10 flex-1 overflow-hidden px-[48px] py-[80px]"><div class="absolute -right-[1.5px] bottom-[0%] h-full w-auto opacity-25 xs:opacity-100 md:opacity-100 md-large:opacity-25 xl:opacity-100"><div class="flex h-full w-auto justify-end"><svg width="100%" height="100%" viewBox="0 0 263 394" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="131.333" height="262.667" rx="64.616" transform="matrix(-1 0 0 1 131.334 0)" fill="#22AB74"/><path d="M262.667 262.667C190.118 262.667 131.334 203.882 131.334 131.333L262.667 131.333L262.667 262.667Z" fill="#22AB74"/><rect width="131.333" height="131.333" rx="65.6667" transform="matrix(4.37114e-08 -1 -1 -4.37114e-08 262.667 131.333)" fill="#0D4B3B"/><rect width="131.333" height="131.333" rx="65.6667" transform="matrix(4.37114e-08 -1 -1 -4.37114e-08 131.334 394)" fill="#22AB74"/><rect x="131.334" y="394" width="131.333" height="131.333" transform="rotate(-90 131.334 394)" fill="#0D4B3B"/></svg></div></div><div class="text-left mx-0 relative z-10"><h2 class="t-h3 text-white mb-4 md:mb-8" style="max-width:292px;color:#22AB74">Try Tailscale for <span class="text-white">free</span></h2><div class="flex-col gap-4 flex justify-start"><div class="w-auto flex-row gap-y-4 space-x-[30px] xs:items-center xs:space-x-5 md:w-full flex justify-start"></div></div><div class="w-full xs:w-auto flex justify-start"><div class="flex w-full !w-auto flex-col gap-y-4 xs:w-auto xs:flex-row xs:items-center xs:space-x-5 md:space-x-[30px]"><a target="" data-track="Link Clicked" data-track-properties="{"label": "Get started"}" href="https://login.tailscale.com/start"><div class="inline-flex shrink-0 border transition-colors duration-200 w-full xs:w-auto items-center justify-center text-center relative focus:outline-none group transition-all overflow-hidden font-body font-medium rounded-lg group gap-[11px] py-2 px-[17px] leading-[1.46] tracking-[-0.16px] bg-heading-white border-white text-heading-black hover:bg-grey-2 hover:border-grey-2"><div>Get started</div><div class="relative "><span class="block will-change-transform" style="opacity:1;transform:none"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 18" class="w-4"><use href="/sprite.svg#arrowRight"></use></svg></span><span class="absolute inset-0 block will-change-transform" style="opacity:0;transform:translateX(-15px) translateY(0px) translateZ(0)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 18" class="w-4"><use href="/sprite.svg#arrowRight"></use></svg></span></div></div></a></div></div></div></div><div class="relative w-full rounded-b-[14px] px-[48px] py-[60px] bg-[#22AB74]" style="color:#1F1E1E"><div class="t-h5 !font-normal">Schedule a demo</div><a class="mt-3 block" data-track="Link Clicked" data-track-properties="{"label": "/contact/sales"}" href="/contact/sales"><div class="inline-flex shrink-0 border transition-colors duration-200 w-full xs:w-auto items-center justify-center text-center relative focus:outline-none group transition-all overflow-hidden font-body font-medium rounded-lg group gap-[11px] py-2 px-[17px] leading-[1.46] tracking-[-0.16px] !w-auto bg-heading-black border-heading-black text-white hover:bg-black-4 hover:border-black-4 "><div>Contact sales</div></div></a></div></div><div class="flex flex-1 items-end justify-center overflow-hidden rounded-[14px] bg-[#082429] pt-[50px]"><div class="px-5" style="transform:translateY(100px) translateZ(0)"><img _type="asset" alt="cta phone" loading="lazy" width="362" height="567" decoding="async" data-nimg="1" class="md:block mx-auto" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 362 567'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/b715b4ca5e2577da60f0d529a4a9bc2ad4cadf59-362x567.svg?w=384&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/b715b4ca5e2577da60f0d529a4a9bc2ad4cadf59-362x567.svg?w=750&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/b715b4ca5e2577da60f0d529a4a9bc2ad4cadf59-362x567.svg?w=750&q=75&fit=clip&auto=format"/></div></div></div><div class="container mt-[60px]"><div><div class="flex flex-wrap items-center justify-center gap-4 lg:justify-between"><div class="flex w-[calc(33%-16px)] flex-col items-center gap-2 sm:w-[calc(33%-16px)] md:w-auto"><img alt="mercury" loading="lazy" width="199" height="81" decoding="async" data-nimg="1" class="mx-auto undefined" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 199 81'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/459a7a8492910eeb22f22bb8d4c0f864b0bae25f-199x81.svg?w=256&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/459a7a8492910eeb22f22bb8d4c0f864b0bae25f-199x81.svg?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/459a7a8492910eeb22f22bb8d4c0f864b0bae25f-199x81.svg?w=640&q=75&fit=clip&auto=format"/></div><div class="flex w-[calc(33%-16px)] flex-col items-center gap-2 sm:w-[calc(33%-16px)] md:w-auto"><img alt="instacrt" loading="lazy" width="199" height="81" decoding="async" data-nimg="1" class="mx-auto undefined" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 199 81'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/7d127f4bb62a408b056328349f291857df6251b3-199x81.svg?w=256&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/7d127f4bb62a408b056328349f291857df6251b3-199x81.svg?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/7d127f4bb62a408b056328349f291857df6251b3-199x81.svg?w=640&q=75&fit=clip&auto=format"/></div><div class="flex w-[calc(33%-16px)] flex-col items-center gap-2 sm:w-[calc(33%-16px)] md:w-auto"><img alt="Retool" loading="lazy" width="199" height="82" decoding="async" data-nimg="1" class="mx-auto undefined" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 199 82'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/e9579b00087d7896e9cb750f4eb39f2c11ed11b8-199x82.svg?w=256&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/e9579b00087d7896e9cb750f4eb39f2c11ed11b8-199x82.svg?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/e9579b00087d7896e9cb750f4eb39f2c11ed11b8-199x82.svg?w=640&q=75&fit=clip&auto=format"/></div><div class="flex w-[calc(33%-16px)] flex-col items-center gap-2 sm:w-[calc(33%-16px)] md:w-auto"><img alt="duolingo" loading="lazy" width="199" height="81" decoding="async" data-nimg="1" class="mx-auto undefined" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 199 81'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/7958bf3d43a30e661ca74cf0510f250d9b99ecef-199x81.svg?w=256&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/7958bf3d43a30e661ca74cf0510f250d9b99ecef-199x81.svg?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/7958bf3d43a30e661ca74cf0510f250d9b99ecef-199x81.svg?w=640&q=75&fit=clip&auto=format"/></div><div class="flex w-[calc(33%-16px)] flex-col items-center gap-2 sm:w-[calc(33%-16px)] md:w-auto"><img alt="Hugging Face" loading="lazy" width="199" height="82" decoding="async" data-nimg="1" class="mx-auto undefined" style="color:transparent;background-size:cover;background-position:50% 50%;background-repeat:no-repeat;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 199 82'%3E%3Cfilter id='b' color-interpolation-filters='sRGB'%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3CfeColorMatrix values='1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 100 -1' result='s'/%3E%3CfeFlood x='0' y='0' width='100%25' height='100%25'/%3E%3CfeComposite operator='out' in='s'/%3E%3CfeComposite in2='SourceGraphic'/%3E%3CfeGaussianBlur stdDeviation='20'/%3E%3C/filter%3E%3Cimage width='100%25' height='100%25' x='0' y='0' preserveAspectRatio='none' style='filter: url(%23b);' href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/wcAAwAB/ucNC4UAAAAASUVORK5CYII='/%3E%3C/svg%3E")" srcSet="https://cdn.sanity.io/images/w77i7m8x/production/68e2e5024898bcd6f6d142e0306dc7564787e1d7-199x82.svg?w=256&q=75&fit=clip&auto=format 1x, https://cdn.sanity.io/images/w77i7m8x/production/68e2e5024898bcd6f6d142e0306dc7564787e1d7-199x82.svg?w=640&q=75&fit=clip&auto=format 2x" src="https://cdn.sanity.io/images/w77i7m8x/production/68e2e5024898bcd6f6d142e0306dc7564787e1d7-199x82.svg?w=640&q=75&fit=clip&auto=format"/></div></div></div></div></section><footer class="pb-16 pt-5 md:pb-28 md:pt-20 "><div class="container grid gap-x-4 gap-y-8 pb-8 xxs:grid-cols-2 sm:grid-cols-3 sm:gap-5 md:pb-[110px] lg:grid-cols-6"><div><p class="t-16 !leading-[1.05] text-heading-black">Product</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/blog/how-tailscale-works">How it works</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/pricing">Pricing</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/integrations">Integrations</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/features">Features</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/compare">Compare Tailscale</a></div></div><div><p class="t-16 !leading-[1.05] text-heading-black">Use Cases</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/use-cases/business-vpn">Business VPN</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/use-cases/remote-access">Remote Access</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/use-cases/site-to-site-networking">Site-to-Site Networking</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/use-cases/homelab">Homelab</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/enterprise">Enterprise</a></div></div><div><p class="t-16 !leading-[1.05] text-heading-black">Resources</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/blog">Blog</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/events-webinars">Events & Webinars</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/partnerships">Partnerships</a></div></div><div><p class="t-16 !leading-[1.05] text-heading-black">Company</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/company">Company</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/careers">Careers</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/press">Press</a></div></div><div><p class="t-16 !leading-[1.05] text-heading-black">Help & Support</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/contact/support">Support</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/contact/sales">Sales</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/security">Security</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/legal">Legal</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/opensource">Open Source</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/changelog">Changelog</a></div></div><div><p class="t-16 !leading-[1.05] text-heading-black">Learn</p><div class="mt-4 flex flex-col gap-3 lg:mt-8 lg:gap-4"><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/generate-ssh-keys">SSH keys</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/ssh-into-docker-container">Docker SSH</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/devsecops">DevSecOps</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/multicloud">Multicloud</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/blog/how-nat-traversal-works">NAT Traversal</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/blog/2021-09-private-dns-with-magicdns">MagicDNS</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/privileged-access-management">PAM</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn/principle-of-least-privilege">PoLP</a><a class="text-[14px] !leading-[1.05] !tracking-[0.08px] transition-colors duration-300 md:text-[16px] text-heading-black/60 hover:text-black/100" href="/learn">All articles</a></div></div></div><div class="container"><div class="grid grid-cols-1 gap-x-5 gap-y-8 border-t border-stroke-grey pt-8 xxs:grid-cols-2 md:grid-cols-12 md:pt-[70px] lg:gap-y-[60px]"><div class="xxs:col-span-2 md:col-span-4"><a class="block w-[160px]" title="Homepage" data-track="Link Clicked" data-track-properties="{"label": "Footer logo"}" href="/"><svg class="transition-colors duration-200 " width="100%" height="100%" viewBox="0 0 110 20" fill="none" xmlns="http://www.w3.org/2000/svg"><ellipse cx="2.44719" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="9.79094" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="2.44719" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="17.1269" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="9.79094" cy="17.5077" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse cx="17.1269" cy="10.1796" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="2.44719" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="9.79094" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><ellipse opacity="0.2" cx="17.1269" cy="2.85924" rx="2.44719" ry="2.44128" fill="#242424"></ellipse><path d="M34.3979 18.458C35.0907 18.458 35.6536 18.3933 36.3248 18.2637V15.7584C35.9134 15.9096 35.4588 15.9528 35.0258 15.9528C33.965 15.9528 33.5753 15.4344 33.5753 14.441V9.34402H36.3248V6.83875H33.5753V3.12403H30.5443V6.83875H28.5742V9.34402H30.5443V14.7217C30.5443 17.0974 31.8 18.458 34.3979 18.458Z" fill="#242424"></path><path d="M41.2747 18.458C42.8984 18.458 43.9809 17.9181 44.5222 17.0758C44.5655 17.443 44.6954 17.9397 44.8686 18.2421H47.5964C47.4449 17.7237 47.3366 16.903 47.3366 16.3631V10.4455C47.3366 8.005 45.583 6.62277 42.617 6.62277C40.3654 6.62277 38.6118 7.46507 37.6376 8.69611L39.3696 10.4023C40.149 9.5384 41.1448 9.08486 42.3572 9.08486C43.8294 9.08486 44.4789 9.58159 44.4789 10.3159C44.4789 10.9422 44.0459 11.3742 41.7077 11.3742C39.4562 11.3742 37.183 12.3028 37.183 14.8945C37.183 17.2918 38.9149 18.458 41.2747 18.458ZM41.8809 16.1687C40.7118 16.1687 40.1706 15.672 40.1706 14.7865C40.1706 14.009 40.8201 13.4907 41.9026 13.4907C43.6345 13.4907 44.1108 13.3827 44.4789 13.0155V13.9442C44.4789 15.1753 43.4397 16.1687 41.8809 16.1687Z" fill="#242424"></path><path d="M49.3069 5.39173H52.4677V2.5625H49.3069V5.39173ZM49.3718 18.2421H52.4028V6.83875H49.3718V18.2421Z" fill="#242424"></path><path d="M54.6109 18.2421H57.6418V2.90805H54.6109V18.2421Z" fill="#242424"></path><path d="M63.9416 18.458C67.2757 18.458 68.986 16.7087 68.986 14.8729C68.986 13.2099 68.1417 11.9789 65.3705 11.4821C63.4221 11.1366 62.2097 10.7046 62.2097 10.0351C62.2097 9.45201 62.9025 9.04166 64.0715 9.04166C65.1107 9.04166 65.9767 9.38722 66.6262 10.1431L68.553 8.52333C67.5788 7.31389 65.9767 6.62277 64.0715 6.62277C61.1489 6.62277 59.3303 8.17777 59.3303 10.0783C59.3303 12.1517 61.2354 13.0803 63.2922 13.4475C65.0025 13.7499 65.9551 14.0738 65.9551 14.8081C65.9551 15.4344 65.2839 15.9528 64.0066 15.9528C62.7509 15.9528 61.7767 15.3696 61.322 14.5058L58.7674 15.7152C59.3952 17.2702 61.5385 18.458 63.9416 18.458Z" fill="#242424"></path><path d="M75.7621 18.458C77.9271 18.458 79.4859 17.5942 80.6549 15.6504L78.2302 14.4194C77.7755 15.3265 77.0395 15.9528 75.7621 15.9528C73.8353 15.9528 72.7961 14.3978 72.7961 12.5188C72.7961 10.6399 73.9003 9.12805 75.7621 9.12805C76.9312 9.12805 77.7106 9.75437 78.1652 10.7046L80.6116 9.40882C79.7889 7.61625 78.1652 6.62277 75.7621 6.62277C71.8003 6.62277 69.7652 9.5168 69.7652 12.5188C69.7652 15.78 72.2333 18.458 75.7621 18.458Z" fill="#242424"></path><path d="M85.4829 18.458C87.1067 18.458 88.1891 17.9181 88.7304 17.0758C88.7737 17.443 88.9036 17.9397 89.0768 18.2421H91.8046C91.6531 17.7237 91.5448 16.903 91.5448 16.3631V10.4455C91.5448 8.005 89.7912 6.62277 86.8252 6.62277C84.5737 6.62277 82.8201 7.46507 81.8458 8.69611L83.5778 10.4023C84.3572 9.5384 85.353 9.08486 86.5654 9.08486C88.0376 9.08486 88.6871 9.58159 88.6871 10.3159C88.6871 10.9422 88.2541 11.3742 85.9159 11.3742C83.6644 11.3742 81.3912 12.3028 81.3912 14.8945C81.3912 17.2918 83.1231 18.458 85.4829 18.458ZM86.0891 16.1687C84.9201 16.1687 84.3788 15.672 84.3788 14.7865C84.3788 14.009 85.0283 13.4907 86.1108 13.4907C87.8427 13.4907 88.319 13.3827 88.6871 13.0155V13.9442C88.6871 15.1753 87.6479 16.1687 86.0891 16.1687Z" fill="#242424"></path><path d="M93.3263 18.2421H96.3573V2.90805H93.3263V18.2421Z" fill="#242424"></path><path d="M103.631 18.458C105.861 18.458 107.658 17.5726 108.654 15.996L106.359 14.5274C105.753 15.4776 104.952 15.996 103.631 15.996C102.138 15.996 101.055 15.1753 100.774 13.5771H109.39V12.5188C109.39 9.5168 107.55 6.62277 103.61 6.62277C99.8643 6.62277 97.8293 9.5384 97.8293 12.5404C97.8293 16.8167 101.055 18.458 103.631 18.458ZM100.882 11.2014C101.358 9.75437 102.354 9.08486 103.675 9.08486C105.168 9.08486 106.078 9.97034 106.381 11.2014H100.882Z" fill="#242424"></path></svg></a></div><div class="flex flex-col gap-[14px] md:col-span-2"><a class="t-14 !leading-[1.05] underline transition-colors duration-300 text-heading-black/60 hover:text-black/100" href="/terms">Terms of Service</a><a class="t-14 !leading-[1.05] underline transition-colors duration-300 text-heading-black/60 hover:text-black/100" href="/privacy-policy">Privacy Policy</a></div><div class="md:col-span-3"><div class="t-14 max-w-[250px] !leading-[1.35] text-heading-black/60 ">WireGuard is a registered trademark of Jason A. Donenfeld.</div></div><div class="flex gap-[6px] xxs:col-span-2 md:col-span-3 md:flex md:justify-end"><a target="_blank" class="group transition-colors duration-300 text-heading-black hover:text-grey-3" data-track="Link Clicked" data-track-properties="{"label": "Footer Twitter logo"}" href="https://twitter.com/tailscale"><svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><rect y="0.988281" width="28" height="28" rx="14" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.03169 9L13.0509 15.0672L8 20H9.13675L13.5587 15.6812L17.1317 20H21L15.6985 13.5916L20.3997 9H19.263L15.1906 12.9775L11.9001 9H8.03169ZM9.70337 9.75698H11.4805L19.3281 19.2429H17.551L9.70337 9.75698Z" fill="white"></path></svg></a><a target="_blank" class="group transition-colors duration-300 text-heading-black hover:text-grey-3" data-track="Link Clicked" data-track-properties="{"label": "Footer Facebook logo"}" href="https://www.facebook.com/tailscale/"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.21875" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M12.434 19.6598L12.4179 14.8081H10.3008V12.7289H12.4179V11.3427C12.4179 9.47188 13.5974 8.57031 15.2966 8.57031C16.1106 8.57031 16.8101 8.62983 17.014 8.65643V10.6115L15.8355 10.612C14.9114 10.612 14.7324 11.0433 14.7324 11.6762V12.7289H17.3577L16.652 14.8081H14.7324V19.6598H12.434Z" fill="#fff"></path></svg></a><a target="_blank" class="group transition-colors duration-300 text-heading-black hover:text-grey-3" data-track="Link Clicked" data-track-properties="{"label": "Footer LinkedIn logo"}" href="https://www.linkedin.com/company/tailscale"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.439453" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.68685 18.6518H10.8825V11.5871H8.68685V18.6518Z" fill="white"></path><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M8.50195 9.34036C8.50195 10.0352 9.07976 10.6143 9.77312 10.6143C10.4896 10.6143 11.0443 10.0584 11.0443 9.34036C11.0443 8.64547 10.4665 8.06641 9.77312 8.06641C9.07976 8.06641 8.50195 8.64547 8.50195 9.34036Z" fill="white"></path><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M16.8917 18.6518H19.0873V14.7836C19.0873 12.8843 18.6713 11.425 16.4525 11.425C15.3894 11.425 14.6729 12.0041 14.3724 12.56H14.3493V11.5871H12.2461V18.6518H14.4418V15.1542C14.4418 14.2509 14.6267 13.3475 15.7592 13.3475C16.8686 13.3475 16.8917 14.413 16.8917 15.2237V18.6518Z" fill="white"></path></svg></a><a target="_blank" rel="me" class="group transition-colors duration-300 text-heading-black hover:text-grey-3" data-track="Link Clicked" data-track-properties="{"label": "Footer Mastodon logo"}" href="https://hachyderm.io/@tailscale"><svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><rect y="0.988281" width="28" height="28" rx="14" fill="currentColor"></rect><path class="transition-colors duration-300 group-hover:fill-heading-black" fill="white" d="M19.9516 10.8781C19.7667 9.48128 18.5693 8.38051 17.1498 8.16721C16.9104 8.13117 16.003 8 13.9011 8H13.8854C11.7829 8 11.3319 8.13117 11.0924 8.16721C9.71243 8.3746 8.45223 9.3637 8.14648 10.777C7.99942 11.4731 7.98373 12.2447 8.01105 12.9526C8.04999 13.9677 8.05755 14.981 8.14823 15.992C8.21091 16.6635 8.32027 17.3297 8.47548 17.9855C8.76612 19.1968 9.94262 20.2048 11.0953 20.616C12.3294 21.0449 13.6566 21.1161 14.9282 20.8216C15.0681 20.7886 15.2065 20.7502 15.3432 20.7064C15.6519 20.6066 16.014 20.4949 16.2803 20.2987C16.2839 20.296 16.2869 20.2924 16.289 20.2883C16.2911 20.2842 16.2923 20.2797 16.2925 20.2751V19.2955C16.2924 19.2911 16.2914 19.2869 16.2895 19.283C16.2876 19.2791 16.2849 19.2758 16.2815 19.2731C16.2782 19.2704 16.2743 19.2686 16.2702 19.2676C16.266 19.2667 16.2617 19.2667 16.2576 19.2677C15.4429 19.4655 14.608 19.5647 13.7703 19.5631C12.3288 19.5631 11.941 18.8677 11.83 18.5782C11.7408 18.3279 11.6841 18.0669 11.6614 17.8018C11.6612 17.7973 11.662 17.7929 11.6638 17.7888C11.6656 17.7847 11.6683 17.7811 11.6717 17.7783C11.6751 17.7755 11.6791 17.7735 11.6834 17.7726C11.6876 17.7716 11.6921 17.7717 11.6963 17.7728C12.4975 17.9693 13.3188 18.0685 14.1429 18.0682C14.3411 18.0682 14.5387 18.0682 14.737 18.0629C15.5659 18.0393 16.4395 17.9962 17.255 17.8343C17.2754 17.8301 17.2957 17.8266 17.3132 17.8213C18.5995 17.5701 19.8237 16.7819 19.9481 14.786C19.9527 14.7074 19.9644 13.963 19.9644 13.8814C19.965 13.6043 20.0521 11.9156 19.9516 10.8781ZM17.9718 15.8584H16.6191V12.4905C16.6191 11.7815 16.3285 11.4199 15.7373 11.4199C15.0875 11.4199 14.762 11.8477 14.762 12.6926V14.5361H13.4175V12.6926C13.4175 11.8477 13.0914 11.4199 12.4415 11.4199C11.8538 11.4199 11.5603 11.7815 11.5597 12.4905V15.8584H10.2083V12.3883C10.2083 11.6793 10.3863 11.116 10.7425 10.6985C11.1098 10.2819 11.5917 10.068 12.1898 10.068C12.8821 10.068 13.4053 10.3386 13.754 10.8793L14.0906 11.4536L14.4277 10.8793C14.7765 10.3386 15.2996 10.068 15.9908 10.068C16.5883 10.068 17.0702 10.2819 17.4387 10.6985C17.7949 11.1156 17.9729 11.6789 17.9729 12.3883L17.9718 15.8584Z"></path></svg></a><a target="_blank" class="group transition-colors duration-300 text-heading-black hover:text-grey-3" data-track="Link Clicked" data-track-properties="{"label": "Footer Youtube logo"}" href="https://www.youtube.com/@Tailscale"><svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.658203" width="27.2195" height="27.2195" rx="13.6098" fill="currentColor"></rect><path class=" transition-colors duration-300 group-hover:fill-heading-black" d="M19.6754 11.46C19.5368 10.5863 19.121 9.98138 18.1506 9.84696C16.6258 9.57813 14.2693 9.57812 14.2693 9.57812C14.2693 9.57812 11.9128 9.57813 10.388 9.84696C9.4177 9.98138 8.93254 10.5863 8.86323 11.46C8.72461 12.3337 8.72461 13.6106 8.72461 13.6106C8.72461 13.6106 8.72461 14.8876 8.86323 15.7613C9.00185 16.635 9.4177 17.2399 10.388 17.3743C11.9128 17.6432 14.2693 17.6432 14.2693 17.6432C14.2693 17.6432 16.6258 17.6432 18.1506 17.3743C19.121 17.1727 19.5368 16.635 19.6754 15.7613C19.814 14.8876 19.814 13.6106 19.814 13.6106C19.814 13.6106 19.814 12.3337 19.6754 11.46ZM12.8831 15.6269V11.5944L16.3486 13.6106L12.8831 15.6269Z" fill="white"></path></svg></a></div><div class="t-14 flex flex-wrap tracking-[0.07px] xxs:col-span-2 md:col-span-12 text-heading-black/60 ">© 2025 Tailscale Inc. All rights reserved. Tailscale is a registered trademark of Tailscale Inc.</div></div></div></footer><script id="hs-script-loader" async="" defer="" src="//js.hs-scripts.com/40004831.js"></script></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"global":{"announcement":{"link":{"label":"Sign up now","url":"https://tailscale.com/events-webinars/replace-your-legacy-vpn"},"text":"Upcoming Webinar: Replace your legacy VPN"},"header":{"_rev":"LkeFT6GdaS5o81PVia9qTZ","_type":"header","menu":[{"hasSubmenu":true,"_key":"95381f81d527","title":"Product","submenu":{"product":{"rightCol":{"nav":{"heading":"Explore","links":[{"link":"/integrations","_key":"c653da519dfb","title":"Integrations"},{"link":"/features","_key":"a878da5fa54c","title":"Features"},{"title":"Compare Tailscale","link":"/compare","_key":"adda698ed879"},{"link":"/community/community-projects","_key":"3341bd9805df","title":"Community Projects"},{"link":"/partnerships","_key":"b57369965809","title":"Partnerships"}]}},"leftCol":{"topNav":{"heading":"Meet Tailscale","links":[{"icon":{"_type":"sanityImage","alt":"icon"},"link":"/blog/how-tailscale-works/","_key":"5495d201056a","title":"How it works"},{"link":"/why-tailscale","_key":"dc9cde7ff83cb94cfc98ff29bdcd0997","title":"Why Tailscale","icon":{"_type":"sanityImage","alt":"icon"}},{"icon":{"_type":"sanityImage","alt":"WireGuard®"},"link":"/wireguard-vpn","_key":"5d88e3ffcc6b","title":"WireGuard® for Enterprises"},{"icon":{"_type":"sanityImage","alt":"Bring Tailscale to Work"},"link":"/bring-tailscale-to-work","_key":"435de37ddd5f","title":"Bring Tailscale to Work"}]}}},"submenuType":"product"}},{"submenu":{"product":{"rightCol":{"nav":{"heading":"By role","links":[{"link":"/solutions/devops","_key":"502a00f49baf","title":"DevOps"},{"link":"/solutions/it","_key":"0fe4c0d6fa83","title":"IT"},{"title":"Security","link":"/solutions/security","_key":"026f30b876a7"}]}},"leftCol":{"topNav":{"heading":"By use-case","links":[{"link":"/use-cases/remote-access","_key":"193eaaa0cef8","title":"Remote Access"},{"link":"/use-cases/site-to-site-networking","_key":"05cadfcf3e65b04708a9d88060f68f9e","title":"Site-to-site Networking"},{"link":"/use-cases/multi-cloud-networking","_key":"fbd28dffeac0","title":"Multi-Cloud Networking"},{"link":"/use-cases/kubernetes","_key":"da202f1d966a","title":"Kubernetes Networking"},{"link":"/use-cases/iot","_key":"8c78e633c6b1","title":"Edge \u0026 IoT Deployments"},{"link":"/use-cases/zero-trust-networking","_key":"6a363d694952","title":"Zero Trust Networking"},{"link":"/use-cases/ai","_key":"9c49b97d6b06","title":"AI Workloads"},{"link":"/use-cases/secure-saas","_key":"2602b548bd52","title":"Secure SaaS"},{"link":"/use-cases/business-vpn","_key":"6fc65e9fe1c6","title":"Business VPN"},{"link":"/use-cases/homelab","_key":"d99d14013ab3","title":"Homelab"}]}}},"submenuType":"product"},"hasSubmenu":true,"_key":"a7062f1924df","title":"Solutions"},{"_key":"fd055b16290df04c6012d0d33c2fad13","title":"Enterprise","submenu":{"submenuType":"product"},"link":"/enterprise","hasSubmenu":false},{"link":"/customers","hasSubmenu":false,"_key":"b595975539c7407a7ed4510edd549223","title":"Customers","submenu":{"resources":{"topNav":[{"description":"How Cribl Enables Secure Work From Anywhere with Tailscale","_key":"61d0f0cb130e","heading":"Cribl"},{"heading":"Cribl","description":"How Cribl Enables Secure Work From Anywhere with Tailscale","_key":"712684d509a6a6ea07ab9401bdb23f8f"},{"heading":"Cribl","description":"How Cribl Enables Secure Work From Anywhere with Tailscale","_key":"ceac3f234a3a6923a671af91772b7e8b"}]},"submenuType":"product","product":{"leftCol":{"topNav":{"links":[{"icon":{"_type":"sanityImage","alt":"Alt text ","asset":{"_type":"reference","_ref":"image-a06dc612b1e3e4f4df53a72030002600639a8738-300x120-png"}},"link":"https://tailscale.com/customers","description":"How Cribl Enables Secure Work From Anywhere with Tailscale","_key":"2d22491d8262","title":"Title here"}],"heading":"Nav heading here"}}}}},{"_key":"f06fabeb084c","title":"Docs","submenu":{"submenuType":"product"},"link":"/kb/1017/install/","hasSubmenu":false},{"submenu":{"submenuType":"product"},"link":"/blog","hasSubmenu":false,"_key":"f2537b6fa068","title":"Blog"},{"submenu":{"submenuType":"product"},"link":"/pricing","hasSubmenu":false,"_key":"e1b7b44dc091","title":"Pricing"}],"_updatedAt":"2025-03-25T14:00:19Z","button":{"buttonOptions":{"color":"black"},"_type":"button","link":{"title":"Get started - it's free!","url":"https://login.tailscale.com/start"}},"links":[{"_key":"157b4ad1150d","title":"Download","url":"/download"},{"_key":"f00209e74f6b","title":"Log in","url":"https://login.tailscale.com/welcome"}],"_id":"7797109d-2dc4-4a75-b5a3-b1019c33212f","title":"Production Header","_createdAt":"2023-10-06T12:21:23Z"},"legal":null,"globalOptions":null,"redirects":[{"destination":"/wireguard-vpn","source":"/wireguard","_key":"8b0a3ebcf822"}],"seo":{"ogImage":{"asset":{"_ref":"image-8e0455b2d9b33c6151016afdf2ea81d7623c2f04-1200x628-png","_type":"reference"},"_type":"image"}},"footer":{"legalContent":"WireGuard is a registered trademark of Jason A. Donenfeld.","_rev":"IlIq0JCGGmrvSiDdugDJgM","title":"Production Footer","_updatedAt":"2024-11-01T16:35:35Z","copyrightContent":"Tailscale Inc. All rights reserved. Tailscale is a registered trademark of Tailscale Inc.","cta":{"ctaButton":{"buttonOptions":{"color":"white"},"_type":"button","link":{"title":"Get started","url":"/get-started"}},"logoGrid":[{"logo":{"_type":"sanityImage","alt":"mercury","asset":{"_ref":"image-459a7a8492910eeb22f22bb8d4c0f864b0bae25f-199x81-svg","_type":"reference"}},"_key":"a3a9b2012378"},{"logo":{"_type":"sanityImage","alt":"instacrt","asset":{"_ref":"image-7d127f4bb62a408b056328349f291857df6251b3-199x81-svg","_type":"reference"}},"_key":"993b75d39e13"},{"_key":"8449f10eb5c7","logo":{"_type":"sanityImage","alt":"Retool","asset":{"_type":"reference","_ref":"image-e9579b00087d7896e9cb750f4eb39f2c11ed11b8-199x82-svg"}}},{"logo":{"_type":"sanityImage","alt":"duolingo","asset":{"_ref":"image-7958bf3d43a30e661ca74cf0510f250d9b99ecef-199x81-svg","_type":"reference"}},"_key":"3ab303288a39"},{"logo":{"_type":"sanityImage","alt":"Hugging Face","asset":{"_ref":"image-68e2e5024898bcd6f6d142e0306dc7564787e1d7-199x82-svg","_type":"reference"}},"_key":"5e630c781c8a"}],"secondaryCta":{"heading":"Schedule a demo","link":{"title":"Contact sales","url":"/contact/sales"}},"heading":"Try Tailscale for |free|","textCard":{"heading":"Try Tailscale for |free|","_type":"textCard","options":{"headingFontColor":"white","sectionAlignment":"left","contentFontColor":"white","headingMaxWidth":292,"hasMobileTextAlignment":false,"highlightColor":"blue-3","headingMarginBottom":"30","headingFontSize":"h3"},"links":[{"button":{"buttonOptions":{"color":"white"},"_type":"button","link":{"title":"Get started","url":"https://login.tailscale.com/start"}},"_key":"dc04d805f7e0","type":"button","textLink":{"_type":"textLink","textLinkOptions":{"arrowColor":"black","underlineColor":"black"}}}]},"asset":{"image":{"_type":"sanityImage","alt":"cta phone","asset":{"_ref":"image-b715b4ca5e2577da60f0d529a4a9bc2ad4cadf59-362x567-svg","_type":"reference"}},"_type":"asset","type":"image"},"darkLogoGrid":[{"_key":"fb360d1bc6c4","logo":{"_type":"sanityImage","alt":"mercury","asset":{"_ref":"image-a1fb7441ec6ea5254d0f14119dbe0abf5c822f9f-199x81-svg","_type":"reference"}}},{"logo":{"_type":"sanityImage","alt":"instacart","asset":{"_ref":"image-62410277e3cd5df52c9b59e787ae52a5a2699580-199x81-svg","_type":"reference"}},"_key":"a24139987731"},{"logo":{"_type":"sanityImage","alt":"Retool","asset":{"_ref":"image-80654c9d97220caec3e35ba29d3e7439a03d482a-199x82-svg","_type":"reference"}},"_key":"0fa57e2eebee"},{"logo":{"_type":"sanityImage","alt":"duolingo","asset":{"_ref":"image-9b799915a326b1b78decc95e6ce251b87111f2bf-199x81-svg","_type":"reference"}},"_key":"b47251ca28bd"},{"logo":{"_type":"sanityImage","alt":"Hugging Face","asset":{"_type":"reference","_ref":"image-b36780abd0594e34b52e74176a6b61811bbed602-199x82-svg"}},"_key":"7bf06e2e5305"}]},"_createdAt":"2023-10-06T14:44:29Z","_type":"footer","footerNav":[{"heading":"Product","links":[{"_key":"30386cf08177","title":"How it works","url":"/blog/how-tailscale-works/"},{"title":"Pricing","url":"/pricing","_key":"45dec9531713"},{"_key":"e6f4d8daff21","title":"Integrations","url":"/integrations"},{"url":"/features","_key":"d4f7875a767f","title":"Features"},{"url":"/compare","_key":"64846fcdaf3b","title":"Compare Tailscale"}],"_key":"05f3fa61c972"},{"heading":"Use Cases","links":[{"_key":"7b4858603fc7","title":"Business VPN","url":"/use-cases/business-vpn"},{"_key":"06fbf46e9354","title":"Remote Access","url":"/use-cases/remote-access"},{"_key":"ab3e69241df2","title":"Site-to-Site Networking","url":"/use-cases/site-to-site-networking"},{"_key":"b79f544a8266","title":"Homelab","url":"/use-cases/homelab"},{"url":"/enterprise","_key":"8660f39ec574","title":"Enterprise"}],"_key":"7870d03d9802"},{"heading":"Resources","links":[{"_key":"b5ad8866742c","title":"Blog","url":"/blog"},{"_key":"21869f26f11b","title":"Events \u0026 Webinars","url":"/events-webinars"},{"title":"Partnerships","url":"/partnerships","_key":"c844ea072844"}],"_key":"2e262725243d"},{"_key":"a1e16018d519","heading":"Company","links":[{"_key":"8cc3fedb5b31","title":"Company","url":"/company"},{"title":"Careers","url":"/careers","_key":"e69d139c2c7c"},{"_key":"ad370d7ab2c1","title":"Press","url":"/press"}]},{"heading":"Help \u0026 Support","links":[{"_key":"f7d6ef6a99c6","title":"Support","url":"/contact/support"},{"_key":"18077954da8f455140153a58c74e53ba","title":"Sales","url":"/contact/sales"},{"_key":"3b91a6bb3d6b","title":"Security","url":"/security"},{"_key":"9d3e837341e2","title":"Legal","url":"/legal"},{"_key":"a69304fe5b80","title":"Open Source","url":"/opensource"},{"_key":"a02943ca7fdd","title":"Changelog","url":"/changelog"}],"_key":"b25bd2c7203e"},{"heading":"Learn","links":[{"_key":"6c45141fcc65","title":"SSH keys","url":"/learn/generate-ssh-keys/"},{"_key":"86c070f995c4","title":"Docker SSH","url":"/learn/ssh-into-docker-container/"},{"url":"/learn/devsecops/","_key":"19c70bbf9478","title":"DevSecOps"},{"_key":"927093698579","title":"Multicloud","url":"/learn/multicloud/"},{"_key":"22e6d051e763","title":"NAT Traversal","url":"/blog/how-nat-traversal-works/"},{"url":"/blog/2021-09-private-dns-with-magicdns/","_key":"4e51a8a4f0a7","title":"MagicDNS"},{"url":"/learn/privileged-access-management/","_key":"f8f8893085b3","title":"PAM"},{"_key":"8775c2b1f419","title":"PoLP","url":"/learn/principle-of-least-privilege/"},{"_key":"e7fdb19bd312","title":"All articles","url":"/learn"}],"_key":"0bdaf34fbe61"}],"legalNav":[{"_key":"b3b1d8dfddea","title":"Terms of Service","url":"/terms"},{"_key":"3e22b7802445","title":"Privacy Policy","url":"/privacy-policy"}],"_id":"422b4abf-6e3f-4213-ab94-a03dd444be3d"},"socials":null,"newsBar":null},"preview":false,"hubspotForms":{},"page":{"removeCTA":false,"parent":null,"title":"Why Tailscale?","overwriteCTAColor":true,"cta":null,"footerStyle":"light","seo":{"indexable":true,"seoTitle":"Why Tailscale? | Tailscale","seoCanonicalURL":"https://tailscale.com/why-tailscale","seoDescription":"Tailscale is a secure and private, identity-based, infrastructure agnostic VPN with a flexible topology, resilient networking, and a streamlined setup."},"themeColor":null,"removeHeader":false,"removeFooter":null,"headerStyle":"dark","sections":[{"_type":"landingPage","landingPageLayout":"whyTailscale","whyTailscale":{"_type":"whyTailscaleLandingPage","masthead":{"content":[{"_type":"block","style":"normal","_key":"4e7dc6baaf2c","markDefs":[{"_type":"link","href":"#secure-and-private","_key":"8fa93b5793f5"},{"_key":"97bbddf887d2","_type":"link","href":"#identity-based"},{"_type":"link","href":"#infrastructure-agnostic","_key":"134fabe5bcd0"},{"_type":"link","href":"#flexible-topology","_key":"44c08e72ef6c"},{"_type":"link","href":"#resilient-networking","_key":"101b013ef75c"},{"_type":"link","href":"#streamlined-setup","_key":"d553cdc47c17"}],"children":[{"marks":[],"text":"Tailscale is a ","_key":"57dbdf028d570","_type":"span"},{"marks":["8fa93b5793f5"],"text":"secure and private","_key":"3505e236de90","_type":"span"},{"_type":"span","marks":[],"text":", ","_key":"361648cbe2e1"},{"_type":"span","marks":["97bbddf887d2"],"text":"identity-based","_key":"c3f74291c7a2"},{"_key":"0bd46a21a3a9","_type":"span","marks":[],"text":", "},{"_type":"span","marks":["134fabe5bcd0"],"text":"infrastructure agnostic","_key":"b54d6dde7ce5"},{"_type":"span","marks":[],"text":" network with a ","_key":"c7509dc49abb"},{"_type":"span","marks":["44c08e72ef6c"],"text":"flexible topology","_key":"2cfa017d70d0"},{"_key":"d13da6c86c30","_type":"span","marks":[],"text":", "},{"_type":"span","marks":["101b013ef75c"],"text":"resilient networking","_key":"258b7a00f839"},{"_type":"span","marks":[],"text":", and a ","_key":"0c87b368c20a"},{"_key":"49519cb8cf40","_type":"span","marks":["d553cdc47c17"],"text":"streamlined setup"},{"text":".","_key":"0191ce0ae833","_type":"span","marks":[]}]}],"heading":"Why Tailscale?","intro":"It's a network that just works.","asset":{"_type":"asset","type":"image","image":{"_type":"sanityImage","alt":"why tailscale","asset":{"_ref":"image-a8f5f94b3d137071e2bb84a5aee75813a5b3abff-732x112-svg","_type":"reference"}}}},"title":"Why Tailscale?","content":{"flexContent":[{"anchor":"Secure and private","_type":"anchorSection","_key":"30203d0c85a0"},{"markDefs":[],"children":[{"_key":"811258003c7a0","_type":"span","marks":[],"text":"Secure and private"}],"_type":"block","style":"h2","_key":"1bd65b2d75f0"},{"markDefs":[],"children":[{"_key":"280d78a1fe2c0","_type":"span","marks":["strong"],"text":"Tailscale is end-to-end encrypted, so we can’t see your traffic."}],"_type":"block","style":"h5","_key":"69aa5109982c"},{"markDefs":[{"_type":"link","href":"https://www.wireguard.com/","_key":"1592ff1f13c0"},{"_type":"link","href":"https://github.com/tailscale/tailscale","_key":"f88cead3c535"},{"_type":"link","href":"https://tailscale.com/kb/1219/network-flow-logs/","_key":"08cf28ba0bfe"},{"_type":"link","href":"https://tailscale.com/kb/1103/exit-nodes/","_key":"058a96f2de6a"}],"children":[{"_type":"span","marks":[],"text":"Tailscale does not, and cannot, inspect your traffic. Tailscale uses ","_key":"b9b289f79b9e0"},{"_type":"span","marks":["1592ff1f13c0"],"text":"WireGuard®","_key":"b9b289f79b9e1"},{"_type":"span","marks":[],"text":" for end-to-end encryption of your traffic. Your private keys stay on your device — and the ","_key":"b9b289f79b9e2"},{"_key":"b9b289f79b9e3","_type":"span","marks":["f88cead3c535"],"text":"code is open source"},{"text":" so you can verify this independently. While Tailscale can’t observe the data transiting your tailnet, with ","_key":"b9b289f79b9e4","_type":"span","marks":[]},{"_type":"span","marks":["08cf28ba0bfe"],"text":"network flow logs","_key":"b9b289f79b9e5"},{"_type":"span","marks":[],"text":", you still have visibility into what’s going on in your network, with metadata about connections being made; to introspect traffic leaving your network, you can use an ","_key":"b9b289f79b9e6"},{"_type":"span","marks":["058a96f2de6a"],"text":"exit node","_key":"b9b289f79b9e7"},{"_type":"span","marks":[],"text":" to route all traffic through a particular egress point.","_key":"b9b289f79b9e8"}],"_type":"block","style":"normal","_key":"5a0e74ae9d9f"},{"children":[{"_type":"span","marks":[],"text":"We are transparent about ","_key":"22041f9dc1ba0"},{"marks":["4d914ac29030"],"text":"our company’s security practices","_key":"22041f9dc1ba1","_type":"span"},{"marks":[],"text":": we publish our internal ","_key":"22041f9dc1ba2","_type":"span"},{"_type":"span","marks":["4251e77180d1"],"text":"security policies","_key":"22041f9dc1ba3"},{"text":" publicly, our ","_key":"22041f9dc1ba4","_type":"span","marks":[]},{"_key":"22041f9dc1ba5","_type":"span","marks":["231155ac696d"],"text":"SOC 2 report"},{"text":" is available self-serve to all of our customers, and we publish ","_key":"22041f9dc1ba6","_type":"span","marks":[]},{"_type":"span","marks":["7207198b1e18"],"text":"security bulletins","_key":"22041f9dc1ba7"},{"_type":"span","marks":[],"text":" about security vulnerabilities in Tailscale. We believe in building trust through transparency — by seeing where we are in terms of security, you can better evaluate our product and make an informed choice if Tailscale meets your needs.","_key":"22041f9dc1ba8"}],"_type":"block","style":"normal","_key":"b4e655730511","markDefs":[{"_type":"link","href":"https://tailscale.com/security","_key":"4d914ac29030"},{"href":"https://tailscale.com/security-policies/","_key":"4251e77180d1","_type":"link"},{"_type":"link","href":"https://tailscale.com/compliance","_key":"231155ac696d"},{"_type":"link","href":"https://tailscale.com/security-bulletins","_key":"7207198b1e18"}]},{"_type":"block","style":"normal","_key":"86ed6162fb2c","markDefs":[{"_type":"link","href":"https://cwe.mitre.org/data/definitions/119.html","_key":"9c09d99a1357"}],"children":[{"_type":"span","marks":[],"text":"Technological decisions in Tailscale were made with a security-first mindset. Tailscale’s core functionality is written in Go, a language with automatic memory management, which prevents a ","_key":"c7f24c0edcd20"},{"_type":"span","marks":["9c09d99a1357"],"text":"whole class of memory safety vulnerabilities","_key":"c7f24c0edcd21"},{"_type":"span","marks":[],"text":". ","_key":"c7f24c0edcd22"}]},{"markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1226/tailnet-lock/","_key":"f7d6ed28c765"}],"children":[{"text":"You don’t need to trust us to use Tailscale. Although we are responsible for managing the coordination server that distributes public keys and settings for your tailnet, with tailnet lock, ","_key":"1ef0d717da970","_type":"span","marks":[]},{"text":"your nodes can verify the public keys distributed by the coordination server before trusting them for network connectivity","_key":"1ef0d717da971","_type":"span","marks":["f7d6ed28c765"]},{"_type":"span","marks":[],"text":".","_key":"1ef0d717da972"}],"_type":"block","style":"normal","_key":"2116a8d8f112"},{"style":"normal","_key":"3970dd5ff8df","markDefs":[{"_key":"cc3e25350903","_type":"link","href":"https://tailscale.com/blog/magicdns-why-name/"},{"_type":"link","href":"https://tailscale.com/blog/tailscale-funnel-beta/","_key":"e4ae02af2401"},{"_type":"link","href":"https://tailscale.com/kb/1246/tailscale-ssh-session-recording/","_key":"0e02bce18a7b"}],"children":[{"_type":"span","marks":[],"text":"Tailscale is architected with strong privacy in mind. Many features in Tailscale are built ‘the hard way’ so that we don’t collect unnecessary data — which means if we get compromised, your data isn’t breached. Tailscale ","_key":"4cf4a26a11f90"},{"_type":"span","marks":["cc3e25350903"],"text":"runs a DNS server on every machine in your tailnet","_key":"4cf4a26a11f91"},{"_type":"span","marks":[],"text":", Tailscale Funnel ","_key":"4cf4a26a11f92"},{"_type":"span","marks":["e4ae02af2401"],"text":"terminates TLS connections on your node","_key":"4cf4a26a11f93"},{"_type":"span","marks":[],"text":", and SSH session recording ","_key":"4cf4a26a11f94"},{"_type":"span","marks":["0e02bce18a7b"],"text":"streams your sensitive data over your tailnet to another node in your network","_key":"4cf4a26a11f95"},{"_type":"span","marks":[],"text":".","_key":"4cf4a26a11f96"}],"_type":"block"},{"_key":"23272d3cb3ae","markDefs":[],"children":[{"_type":"span","marks":[],"text":"","_key":"dc818aca61cb"}],"_type":"block","style":"normal"},{"children":[{"text":"","_key":"26c605850d9e","_type":"span","marks":[]}],"_type":"block","style":"normal","_key":"e86a51f8cbfa","markDefs":[]},{"anchor":"Identity-based","_type":"anchorSection","_key":"8b94e15bd827"},{"style":"h2","_key":"746ea556508b","markDefs":[],"children":[{"_type":"span","marks":[],"text":"Identity-based","_key":"d53c4108eda90"}],"_type":"block"},{"markDefs":[],"children":[{"text":"Tailscale brings identity to the network layer, so that you can control access based on user identity, not only IP address.","_key":"31315c2106ce0","_type":"span","marks":["strong"]}],"_type":"block","style":"normal","_key":"7eac92c698b6"},{"_type":"block","style":"normal","_key":"39089215a550","markDefs":[{"href":"https://tailscale.com/kb/1219/network-flow-logs/","_key":"299406f72051","_type":"link"}],"children":[{"marks":[],"text":"With Tailscale, rather than managing access controls based only on IP addresses, you can intuitively and flexibly define which users should have access to which services based on existing user identities, as well as groups, services, and subnet ranges. You can still detect anomalous behavior based on unusual access patterns in your ","_key":"301c3d0af2f90","_type":"span"},{"marks":["299406f72051"],"text":"connection logs","_key":"301c3d0af2f91","_type":"span"},{"text":", with more context than you would have using just IP addresses.","_key":"301c3d0af2f92","_type":"span","marks":[]}]},{"_key":"8e009dea65f3","markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1013/sso-providers/","_key":"2f7bd981a299"},{"_type":"link","href":"https://tailscale.com/kb/1240/sso-custom-oidc","_key":"f8252d1e8189"},{"href":"https://tailscale.com/kb/1180/sso-okta-scim","_key":"04e986962e68","_type":"link"}],"children":[{"_type":"span","marks":[],"text":"You ","_key":"baa0bc1e1b230"},{"text":"sign in to Tailscale with your identity provider","_key":"baa0bc1e1b231","_type":"span","marks":["2f7bd981a299"]},{"marks":[],"text":", such as Google, Microsoft Entra ID, Okta, or any ","_key":"baa0bc1e1b232","_type":"span"},{"_type":"span","marks":["f8252d1e8189"],"text":"OIDC provider","_key":"baa0bc1e1b233"},{"_type":"span","marks":[],"text":". By using your existing identity provider, it’s one fewer password to remember (or lose) — but it also means you can require multi-factor authentication to access resources on your network. You can sync membership information to ","_key":"baa0bc1e1b234"},{"_type":"span","marks":["04e986962e68"],"text":"automatically grant or revoke access to users","_key":"baa0bc1e1b235"},{"_type":"span","marks":[],"text":" as part of onboarding or offboarding, and grant groups from your identity provider access to specific resources.","_key":"baa0bc1e1b236"}],"_type":"block","style":"normal"},{"children":[{"_type":"span","marks":[],"text":"Tailscale isn’t just used for managing user access to services — it can also be used to manage service to service access. You can control what an application can access based on its ","_key":"e10a8994b3610"},{"_type":"span","marks":["6bc2e999ac86"],"text":"ACL tag service account identity","_key":"e10a8994b3611"},{"marks":[],"text":".","_key":"e10a8994b3612","_type":"span"}],"_type":"block","style":"normal","_key":"0d26506b3ba0","markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1068/acl-tags/","_key":"6bc2e999ac86"}]},{"style":"normal","_key":"2b96d9089585","markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1005/multifactor-anything/","_key":"add5204f69d1"},{"href":"https://tailscale.dev/blog/id-headers-tailscale-serve-flask","_key":"e0172ab550cb","_type":"link"},{"_type":"link","href":"https://tailscale.com/blog/grafana-auth/","_key":"f3046af3d319"}],"children":[{"_type":"span","marks":[],"text":"Since every Tailscale node has a user or service identity, every packet in your network is authenticated. That means you can use Tailscale to ","_key":"2f51024711c50"},{"_type":"span","marks":["add5204f69d1"],"text":"add multi-factor authentication to any legacy service","_key":"2f51024711c51"},{"_type":"span","marks":[],"text":", use a Tailscale identity to ","_key":"2f51024711c52"},{"_type":"span","marks":["e0172ab550cb"],"text":"authenticate users to your service","_key":"2f51024711c53"},{"_type":"span","marks":[],"text":", or use Tailscale as ","_key":"2f51024711c54"},{"_type":"span","marks":["f3046af3d319"],"text":"an auth proxy for a third-party service","_key":"2f51024711c55"},{"_type":"span","marks":[],"text":".","_key":"2f51024711c56"}],"_type":"block"},{"style":"normal","_key":"ffed631cb401","markDefs":[],"children":[{"text":"","_key":"2afb998044c3","_type":"span","marks":[]}],"_type":"block"},{"style":"normal","_key":"b1967a5fcfb1","markDefs":[],"children":[{"_type":"span","marks":[],"text":"","_key":"a4d17c1bef1e"}],"_type":"block"},{"anchor":"Infrastructure-agnostic","_type":"anchorSection","_key":"09b51b1af9ef"},{"_type":"block","style":"h2","_key":"541700bba6a1","markDefs":[],"children":[{"marks":[],"text":"Infrastructure-agnostic","_key":"a0e354545bad0","_type":"span"}]},{"markDefs":[],"children":[{"_type":"span","marks":["strong"],"text":"Tailscale works where you need it. Any platform, any runtime, anywhere.","_key":"8cf0c9f4c2100"}],"_type":"block","style":"normal","_key":"81271e512bae"},{"_key":"85f9df2e0695","markDefs":[],"children":[{"_type":"span","marks":[],"text":"Tailscale is hardware-agnostic — so you can make decisions about your hardware independently from decisions about your network. Tailscale creates an overlay network, using your existing network, which means it can be incrementally deployed. You don’t need to buy new network switches to use Tailscale, or to change your network architecture.","_key":"1cb53528c52e0"}],"_type":"block","style":"normal"},{"children":[{"_type":"span","marks":[],"text":"Tailscale allows you to connect from on-prem to cloud, ","_key":"440b8da1aeff0"},{"_type":"span","marks":["125d000db571"],"text":"site to site","_key":"440b8da1aeff1"},{"marks":[],"text":", cloud to cloud, and cluster to cluster. By allowing you to peer directly between infrastructure, Tailscale enables you to define your network as you wish and use whatever infrastructure is best for you.","_key":"440b8da1aeff2","_type":"span"}],"_type":"block","style":"normal","_key":"a53bfa152bb6","markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1214/site-to-site/","_key":"125d000db571"}]},{"_type":"block","style":"normal","_key":"05d2e38759b0","markDefs":[{"_type":"link","href":"https://tailscale.com/downloads","_key":"b85779c55858"},{"_type":"link","href":"https://tailscale.com/kb/1244/tsnet/","_key":"67eba17e8b7a"},{"_type":"link","href":"https://tailscale.com/blog/steam-deck/","_key":"2e2be9a30553"},{"_type":"link","href":"https://twitter.com/bradfitz/status/1585742267964624897","_key":"4161a6e9bb53"},{"_type":"link","href":"https://tailscale.dev/blog/tailscale-sucks","_key":"06719035ae5e"}],"children":[{"_type":"span","marks":[],"text":"Tailscale is available on a ","_key":"e95fabeef86f0"},{"text":"wide range of operating systems","_key":"e95fabeef86f1","_type":"span","marks":["b85779c55858"]},{"_type":"span","marks":[],"text":", including Linux, Windows, macOS, iOS, Android, ARM and more. Tailscale runs everywhere you run, including VMs, containers, functions, and even ","_key":"e95fabeef86f2"},{"_type":"span","marks":["67eba17e8b7a"],"text":"inside your applications","_key":"e95fabeef86f3"},{"_type":"span","marks":[],"text":". Tailscale works with almost anything — it already runs on your ","_key":"e95fabeef86f4"},{"_type":"span","marks":["2e2be9a30553"],"text":"Steam Deck","_key":"e95fabeef86f5"},{"marks":[],"text":", ","_key":"e95fabeef86f6","_type":"span"},{"_type":"span","marks":["4161a6e9bb53"],"text":"Tesla","_key":"e95fabeef86f7"},{"marks":[],"text":", and ","_key":"e95fabeef86f8","_type":"span"},{"_type":"span","marks":["06719035ae5e"],"text":"robot vacuum cleaner","_key":"e95fabeef86f9"},{"_type":"span","marks":[],"text":".","_key":"e95fabeef86f10"}]},{"style":"normal","_key":"a7e1fbe93dbb","markDefs":[],"children":[{"_type":"span","marks":[],"text":"","_key":"e1aee9cd4577"}],"_type":"block"},{"markDefs":[],"children":[{"_type":"span","marks":[],"text":"","_key":"521972731791"}],"_type":"block","style":"normal","_key":"dafbebdf5233"},{"_type":"anchorSection","_key":"251ac8a5b039","anchor":"Flexible topology"},{"_type":"block","style":"h2","_key":"0443f8d3067e","markDefs":[],"children":[{"text":"Flexible topology","_key":"32a93107120b0","_type":"span","marks":[]}]},{"style":"normal","_key":"442f1ff7f282","markDefs":[],"children":[{"_type":"span","marks":["strong"],"text":"Tailscale lets you segment your network and migrate to a zero-trust architecture.","_key":"b16a5d8a09d10"}],"_type":"block"},{"children":[{"marks":[],"text":"Tailscale connects users to services, and services to services, directly to each other — not through a concentrator — which means no choke point for your traffic, or single point of failure for your network. Configuration is managed centrally, but pushed to every device, so that ","_key":"e610e6bf9c180","_type":"span"},{"_type":"span","marks":["79fd36e75bd2"],"text":"access rules are enforced locally","_key":"e610e6bf9c181"},{"_type":"span","marks":[],"text":". Without a concentrator, traffic isn’t throttled, and isn’t routed halfway across the world, so connections are low latency. And ","_key":"e610e6bf9c182"},{"_type":"span","marks":["9266674eda76"],"text":"split tunneling","_key":"e610e6bf9c183"},{"_type":"span","marks":[],"text":" means that only traffic meant for the network even goes over the network.","_key":"e610e6bf9c184"}],"_type":"block","style":"normal","_key":"41d61130c5d4","markDefs":[{"_type":"link","href":"https://tailscale.com/blog/how-tailscale-works/","_key":"79fd36e75bd2"},{"_type":"link","href":"https://tailscale.com/kb/1054/dns/#nameservers","_key":"9266674eda76"}]},{"markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1019/subnets/","_key":"6025b118c31d"}],"children":[{"_type":"span","marks":[],"text":"Tailscale is mesh-capable, so although we recommend your devices connect peer-to-peer, you can also use ","_key":"a22645c0038b0"},{"_type":"span","marks":["6025b118c31d"],"text":"subnet routers","_key":"a22645c0038b1"},{"_type":"span","marks":[],"text":" to more easily and quickly connect existing subnets, VPCs, or embedded devices to your network. You’re free to use whatever network topology works best for you.","_key":"a22645c0038b2"}],"_type":"block","style":"normal","_key":"68d028b5a7f9"},{"_type":"block","style":"normal","_key":"a04bc9af9887","markDefs":[{"_key":"95dbe48ece99","_type":"link","href":"https://tailscale.com/kb/1018/acls/"}],"children":[{"_type":"span","marks":[],"text":"Access rules in Tailscale are ","_key":"f1adad10470c0"},{"_key":"f1adad10470c1","_type":"span","marks":["95dbe48ece99"],"text":"fine-grained"},{"_type":"span","marks":[],"text":", so you can specify access for users, groups, and services to specific nodes, even including allowed ports and protocols. By default, all access is denied, so you can write access rules that follow the principle of least privilege. This effectively micro segments your network — so that each node is firewalled from and will not accept traffic from any other node unless explicitly allowed.","_key":"f1adad10470c2"}]},{"markDefs":[],"children":[{"text":"Tailscale helps you migrate to a zero trust network architecture: where being on a particular network or having a particular IP address isn’t sufficient for access, but instead, access is granted based on granular access controls. Even better, Tailscale lets you decouple the move to a new VPN from the move to a micro segmented network, so that you can make the move gradually and incrementally, at your own pace. Compare this to compute in the early 2010s: instead of moving your application to the cloud and simultaneously rearchitecting it, you could lift and shift and then gradually adopt containers and functions for new greenfield applications. Similarly, you can move to Tailscale, and then gradually restrict your access rules to further segment your network and adopt principles of zero trust.","_key":"9bfbfd9724240","_type":"span","marks":[]}],"_type":"block","style":"normal","_key":"ebb21600ecab"},{"children":[{"_type":"span","marks":[],"text":"","_key":"bf573d5870c3"}],"_type":"block","style":"normal","_key":"86af966ae162","markDefs":[]},{"children":[{"_type":"span","marks":[],"text":"","_key":"7affab933585"}],"_type":"block","style":"normal","_key":"77986e7cf2d4","markDefs":[]},{"anchor":"Resilient networking","_type":"anchorSection","_key":"dff0bc5b20bc"},{"children":[{"marks":[],"text":"Resilient networking","_key":"8d4c0a41084a0","_type":"span"}],"_type":"block","style":"h2","_key":"2106681606ce","markDefs":[]},{"markDefs":[],"children":[{"marks":["strong"],"text":"Tailscale connects your devices no matter where they are, across any infrastructure.","_key":"6bc595ce51820","_type":"span"}],"_type":"block","style":"normal","_key":"e6170cd7ab7e"},{"style":"normal","_key":"bb0e9d17da9b","markDefs":[{"_type":"link","href":"https://tailscale.com/blog/how-nat-traversal-works/","_key":"95114f5a303d"},{"_type":"link","href":"https://tailscale.com/kb/1232/derp-servers/","_key":"cf38da2a7549"}],"children":[{"_type":"span","marks":[],"text":"Tailscale uses ","_key":"824ef51f03710"},{"_key":"824ef51f03711","_type":"span","marks":["95114f5a303d"],"text":"NAT traversal"},{"_type":"span","marks":[],"text":" and ","_key":"824ef51f03712"},{"_type":"span","marks":["cf38da2a7549"],"text":"DERP relay servers","_key":"824ef51f03713"},{"_type":"span","marks":[],"text":" to connect to devices, even when they’re behind firewalls or NATs. Nearly all of the time, you don’t need to open any firewall ports to use Tailscale, and you can keep your network ingress and egress points locked down.","_key":"824ef51f03714"}],"_type":"block"},{"style":"normal","_key":"4f4c210eeea1","markDefs":[],"children":[{"_type":"span","marks":[],"text":"Tailscale stays connected and seamlessly transitions between networks — so you don’t have to log back in when you lose network connectivity. WireGuard uses a keepalive protocol to keep connections open, even if there is no traffic to a node on your network.","_key":"ef476a45fe1e0"}],"_type":"block"},{"style":"normal","_key":"fd693cbd7b05","markDefs":[{"href":"https://tailscale.com/kb/1081/magicdns/","_key":"a27f6e39eda5","_type":"link"},{"_type":"link","href":"https://tailscale.com/kb/1201/4via6-subnets/","_key":"f0eed241da11"}],"children":[{"_type":"span","marks":[],"text":"Tailscale makes your services easily addressable. Tailscale assigns your devices static IP addresses, which they maintain even as they move around on your network. You can access services based on their IPv4 or IPv6 addresses, or ","_key":"acc75485e1d70"},{"_type":"span","marks":["a27f6e39eda5"],"text":"DNS names","_key":"acc75485e1d71"},{"marks":[],"text":". You can even connect ","_key":"acc75485e1d72","_type":"span"},{"_type":"span","marks":["f0eed241da11"],"text":"multiple subnets with overlapping IP ranges","_key":"acc75485e1d73"},{"text":", and have them all accessible on the same network.","_key":"acc75485e1d74","_type":"span","marks":[]}],"_type":"block"},{"_type":"block","style":"normal","_key":"9342ec983ebd","markDefs":[{"_type":"link","href":"https://tailscale.com/blog/more-throughput/","_key":"b34697700366"}],"children":[{"marks":[],"text":"Despite providing end-to-end encryption, Tailscale is performant, with ","_key":"dce99c7aa9880","_type":"span"},{"_type":"span","marks":["b34697700366"],"text":"10Gb/s throughput on bare metal","_key":"dce99c7aa9881"},{"marks":[],"text":". With such high throughput, most connections aren’t degraded — which means you don’t need to make a tradeoff between security and usability.","_key":"dce99c7aa9882","_type":"span"}]},{"_key":"6d0448c85d26","markDefs":[],"children":[{"_type":"span","marks":[],"text":"","_key":"7ed716049979"}],"_type":"block","style":"normal"},{"children":[{"_type":"span","marks":[],"text":"","_key":"bdef2a6e6715"}],"_type":"block","style":"normal","_key":"8185ef095107","markDefs":[]},{"anchor":"Streamlined setup","_type":"anchorSection","_key":"16450a553997"},{"markDefs":[],"children":[{"_type":"span","marks":[],"text":"Streamlined setup","_key":"da7df517e0450"}],"_type":"block","style":"h2","_key":"c75e09e4b288"},{"children":[{"_type":"span","marks":["strong"],"text":"Tailscale can be set up by users in minutes, and deployed to servers programmatically.","_key":"9c54c70fdc700"}],"_type":"block","style":"normal","_key":"bf8624771217","markDefs":[]},{"markDefs":[],"children":[{"text":"It’s frustratingly easy to set up Tailscale: download it and log in on any device, and you’re connected to your own private network. Invite your team to your network and get started with Tailscale, without needing to put down a credit card. Since it just works, your users don’t need to deal with it as often, and your IT team gets fewer support tickets.","_key":"9cb5679e7b240","_type":"span","marks":[]}],"_type":"block","style":"normal","_key":"0bf5e915c158"},{"markDefs":[{"_key":"f85c00a70c53","_type":"link","href":"https://tailscale.com/kb/1085/auth-keys"},{"_type":"link","href":"https://tailscale.com/kb/1215/oauth-clients/#scopes","_key":"27352bdf7c98"},{"_type":"link","href":"https://tailscale.com/kb/1245/set-up-servers/","_key":"3bf31d2e2286"},{"_type":"link","href":"https://tailscale.com/kb/1018/acls/","_key":"3f405a6e8b7b"},{"_type":"link","href":"https://tailscale.com/kb/1204/gitops-acls/","_key":"31fd1c7e6a25"},{"_type":"link","href":"https://tailscale.com/kb/infrastructure-as-code/","_key":"1798b54c0cfa"},{"_type":"link","href":"https://tailscale.com/blog/tsnet-virtual-private-services/","_key":"0def1b094c5a"}],"children":[{"_type":"span","marks":[],"text":"Tailscale is built with developers in mind. Tailscale can be deployed to your network ","_key":"e40dd8b8c8bd0"},{"_type":"span","marks":["f85c00a70c53"],"text":"programmatically","_key":"e40dd8b8c8bd1"},{"_type":"span","marks":[],"text":", with ","_key":"e40dd8b8c8bd2"},{"marks":["27352bdf7c98"],"text":"fine-grained API scopes","_key":"e40dd8b8c8bd3","_type":"span"},{"marks":[],"text":" — you can ","_key":"e40dd8b8c8bd4","_type":"span"},{"_type":"span","marks":["3bf31d2e2286"],"text":"set up a server","_key":"e40dd8b8c8bd5"},{"_key":"e40dd8b8c8bd6","_type":"span","marks":[],"text":" so that when it connects to the network, it already has access to only what it’s supposed to. Your "},{"_type":"span","marks":["3f405a6e8b7b"],"text":"network access rules","_key":"e40dd8b8c8bd7"},{"_type":"span","marks":[],"text":" are configured as code, so you can ","_key":"e40dd8b8c8bd8"},{"text":"manage them in git","_key":"e40dd8b8c8bd9","_type":"span","marks":["31fd1c7e6a25"]},{"_type":"span","marks":[],"text":" or with ","_key":"e40dd8b8c8bd10"},{"_type":"span","marks":["1798b54c0cfa"],"text":"IaC tools","_key":"e40dd8b8c8bd11"},{"_type":"span","marks":[],"text":". You can even ","_key":"e40dd8b8c8bd12"},{"text":"build Tailscale into your application","_key":"e40dd8b8c8bd13","_type":"span","marks":["0def1b094c5a"]},{"_type":"span","marks":[],"text":".","_key":"e40dd8b8c8bd14"}],"_type":"block","style":"normal","_key":"527ed42b7a20"},{"markDefs":[],"children":[{"text":"Tailscale makes the secure way, the easy way. WireGuard uses opinionated, modern cryptography with no user configurations, and no way to downgrade security. In Tailscale, access rules are default deny, and API keys automatically expire. Making security hard to mess up means there’s less mess to clean up.","_key":"54e939ec6a400","_type":"span","marks":[]}],"_type":"block","style":"normal","_key":"102791de2b19"},{"_key":"7d56fd66d99d","markDefs":[{"_type":"link","href":"https://tailscale.com/kb/1337/acl-syntax#tests","_key":"aa6ec8f11d46"}],"children":[{"_key":"e1ec0a8d96380","_type":"span","marks":[],"text":"A constant for network infrastructure is change. Tailscale is designed to work regardless of the shifts occurring in your network infrastructure. You can "},{"_type":"span","marks":["aa6ec8f11d46"],"text":"validate that access rules don’t change your desired controls","_key":"e1ec0a8d96381"},{"_key":"e1ec0a8d96382","_type":"span","marks":[],"text":" over time. We make significant efforts to maintain backward compatibility with prior versions, to ensure versioning does not act as a blocker for your teams to produce their best work."}],"_type":"block","style":"normal"}]}}}],"_type":"page","invertHeader":null,"ctaColor":"green","_id":"3d84da26-d651-4be4-86ce-ca9a0d0e729a","slug":{"current":"why-tailscale","_type":"slug"}},"pageType":"page"},"__N_SSG":true},"page":"/[...slug]","query":{"slug":["why-tailscale"]},"buildId":"mz8O9WjSDaVV3kPB5sqDN","isFallback":false,"isExperimentalCompile":false,"gsp":true,"scriptLoader":[]}</script></body></html>