Tailscale
Mesh VPN built on WireGuard that connects devices into a private network.
HN commenters like Tailscale for near-trivial setup1234, secure remote access to home servers, media and dev machines without opening ports5678, and easier mesh management and NAT traversal than plain WireGuard.91011 The most common caveat is distrust of its large feature surface and concern that it has not been formally security audited121314, with smaller complaints about pricing tiers, iPhone battery drain and client logging.151617
Why people recommend it
Easy setup · 3
Commenters describe it as trivial, low-touch and simple to set up.
“I use jellyfin remotely with tailscale. It was trivial to set up.”
“Tailscale is low touch”
Show 1 more
“Tailscale is wonderful magic. Free (for my usage), so easy to set up”
Remote dev access · 3
Used to reach work machines, VPSes and coding agents from laptops and phones.
“I use Claude Code + eternal terminal + tailscale + tmux”
“The built-in terminal app also works nicely with herdr and Tailscale to let me connect to my work machine.”
Show 1 more
“Tailscale lets me use it from my ultrabook / lightweight laptop, no burning lap or crazy fan noises.”
Home server access · 3
Lets people reach self-hosted media, NAS and files behind NAT while away.
“I've been running a home server and Tailscale is magic.”
“coupled with Tailscale I can access everything on my Nas everywhere”
Show 1 more
“I use the free tier of TailScale to expose my home network to specific devices in the public world.”
Security posture · 3
Lets users keep firewalls closed and reach services only over the tailnet.
“I've been running a home server and Tailscale is magic.”
“I ssh in via Tailscale.”
Show 1 more
“the foundation of my entire approach to security is Tailscale”
Beats WireGuard · 3
Preferred over self-managed WireGuard for many devices and for NAT busting.
“Today I use Tailscale (with Headscale as the control plane) for all users”
“the main reason I use it over self hosting wireguard is the NAT busting it does”
Show 1 more
“Before I moved to Tailscale, my self-hosted Wireguard setup was pretty shaky”
Free tier · 3
Several users say the free tier covers their usage well.
“I use TailScale's free tier and its great.”
“Tailscale is wonderful magic. Free (for my usage), so easy to set up”
Show 1 more
“Tailscale >>> wireguard.”
Caveats and dissent
Security concerns · 3
Some worry about its large attack surface and lack of formal security audits.
“There are too many features, and lines of code (probably more than OpenVPN). I'm pretty sure there are all kinds of zero days in it”
“But for a security tool they need to up their game seriously.”
Show 1 more
“But we don't trust Tailscale.”
ACL gaps · 2
Taildrop can let untagged nodes send files despite deny-by-default ACLs.
“But now this node can still send arbitrary files to my laptop. If I don't remember to tag it, I'm vulnerable.”
“There are too many features, and lines of code (probably more than OpenVPN). I'm pretty sure there are all kinds of zero days in it”
Pricing tiers · 1
One user left because the first paid tier lacked SSH features.
“I switched from Tailscale to Netbird purely because of Tailscale's bizarre pricing tiers”
iPhone battery · 1
One user stopped using it on iPhone due to heavy battery drain.
“I love TailScale but was getting crazy battery drain on my iPhone with it installed and setup. Still use it, just not from my phone now”
Client logging · 1
The client sends connection metadata to Tailscale unless logging is disabled.
“Otherwise Tailscale (the company) will be collecting your behavioral metadata every time you use your Kindle”
Reliability · 1
One user reports the Tailscale server periodically becomes unreachable until reinstalled.
“periodically my system will refuse to see the Tailscale server”
Often compared with
4 moved from WireGuard to Tailscale
1 moved from Tailscale to WireGuardHeadscale17 comments mention both
2 moved from Tailscale to NetBird
Who recommends it in their own words
From the makers not counted in the ranking
“The problems that are found internally, or via security reviews and pentests we pay for, are ones that we fix before releasing.”
“We love to see people's creativity with Tailscale! - Val @ Tailscale”
“We integrate with systemd-resolved _by preference_ on Linux if it is present”
Threads where it came up
- Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? 11 mentions
- Tailscale SSH: Investigation and remediation update 6 mentions
- Tailscale didn't stop the Hugging Face intrusion 6 mentions
- Cloudflare Quick Tunnels 5 mentions
- I traced my traffic through a home Tailscale exit node 5 mentions
- Netbird a German Tailscale alternative (P2P WireGuard-based overlay network) 5 mentions
Data: tailscale.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 50
“I run this on a Tailscale network.”
“I use it only with tailscale.”
“For a single person with herdr+tailscale, you can make your own evolving software thingamajig across all the possible computers u have access to”
“I use multiple Macs with Tailscale connections”
“relying on a centralized service like Zerotier and Tailscale”
“But now this node can still send arbitrary files to my laptop. If I don't remember to tag it, I'm vulnerable.”
“I make my sshd only listen on the Tailscale IP.”
“it does not scale as well as tailscale.”
“just use regular old ssh over the tailnet, not tailscale ssh”
“I use tailnet as a vpn and ssh into my server via the tailnet, but I dont use tailscale ssh the product.”
“There are too many features, and lines of code (probably more than OpenVPN). I'm pretty sure there are all kinds of zero days in it”
“it sent me a temporary authorization link via Tailscale, connected to the machine and restarted the stuck process for me.”
“I use jellyfin remotely with tailscale. It was trivial to set up.”
“The built-in terminal app also works nicely with herdr and Tailscale to let me connect to my work machine.”
“search for another app called Tailscale and now log in with my credentials”
“Tailscale is low touch”
“similar to Tailscale and other existing solutions”
“Then you can use tailscale for remote access”
“I use tailscale (outside the k8s cluster) for connectivity.”
“Right now everybody seems to be centering on vendor solutions like TailScale for this.”
“the networking is very similar to tailscale”
“Tailscale >>> wireguard.”
“another MCP for other actions over Tailscale”
“Tailscale is much easier to manage for full mesh and just adding personal devices.”
“route work to my local AI inference server through tailscale”
“Today I use Tailscale (with Headscale as the control plane) for all users”
“Codex/Claude Code alongside things like Cloudflare and Tailscale make self hosting far easier”
“self-hosting over tailscale and cloudflare tunnels”
“Setup is simple with Tailscale”
“ACLs are super simple and work well, just dig into them.”
“I like putting it on everything I can. It is pretty easy to use.”
“You can do this using tailscale or even rathole.”
“Dev guy here, so tailscale + Antigravity (+ GitHub).”
“the foundation of my entire approach to security is Tailscale”
“The SaaS providers (Tailscale, Cloudflare, etc.) have done a good job making it really easy on their infra”
“I would immediately go with Tailscale for a business; I know it and I use it.”
“I could also move everything into something like tailscale. Then at least the domains are private.”
“I use Claude Code + eternal terminal + tailscale + tmux”
“all monitored from my phone over Tailscale”
“accessing it elsewhere with Tailscale”
“I love TailScale but was getting crazy battery drain on my iPhone with it installed and setup. Still use it, just not from my phone now”
“I switched from Tailscale to Netbird purely because of Tailscale's bizarre pricing tiers”
“coupled with Tailscale I can access everything on my Nas everywhere”
“I've been running a home server and Tailscale is magic.”
“Tailscale is wonderful magic. Free (for my usage), so easy to set up”
“I ssh in via Tailscale.”
“But for a security tool they need to up their game seriously.”
“Otherwise Tailscale (the company) will be collecting your behavioral metadata every time you use your Kindle”
“But we don't trust Tailscale.”
“the main reason I use it over self hosting wireguard is the NAT busting it does”