Skip to content

headscale

VPN & Tunnels

An open source, self-hosted implementation of the Tailscale control server

Go Latest v0.28.0 · 3mo ago Security brief →

Features

  • Provides a self‑hosted alternative to Tailscale's proprietary control server
  • Supports a single Tailscale network (tailnet) suitable for personal or small open‑source use
  • Offers Docker container images and binary releases from the main branch

Recent releases

View all 1 releases →
v0.28.0 Breaking risk
Breaking changes
  • Node API message simplified: ForcedTags, InvalidTags, ValidTags replaced with Tags field
  • PreAuthKey CLI now uses ID-based operations instead of user+key combinations
Notable features
  • Tags as identity following Tailscale model
  • Smarter map updates with partial instead of full network maps
  • Pre-authentication keys now use bcrypt hashing

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
39,497
Forks
2,164
Languages
Go Nix Shell

Install & Platforms

Install via
docker binary

Community & Support

Alternative to

Tailscale

Beta — feedback welcome: [email protected]