Skip to content
headscale
VPN & Tunnels
An open source, self-hosted implementation of the Tailscale control server
Go
·
Latest v0.29.2 · 25d ago
Security brief →
Features
-
Self‑hosted, open‑source alternative to the Tailscale control server
-
Supports a single Tailscale network (tailnet) for personal or small‑team use
-
Provides WireGuard key exchange, IP assignment, and route management
Upgrade now
v0.29.2
Bug fix
·
Breaking upgrade
Map stall fix + WS upgrade + Invalid name handling
Upgrade now
v0.29.1
Breaking risk
·
Breaking upgrade
User assignment fix
Review required
v0.29.0
Breaking risk
·
Auth
RBAC
Breaking upgrade
Client min, ACL compat, SSH checks, policy tests, Taildrive
v0.28.0
Breaking risk
·
Breaking changes
- Node API message simplified: ForcedTags, InvalidTags, ValidTags replaced with Tags field
- PreAuthKey CLI now uses ID-based operations instead of user+key combinations
Notable features
- Tags as identity following Tailscale model
- Smarter map updates with partial instead of full network maps
- Pre-authentication keys now use bcrypt hashing
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
Go
·
Nix
·
Shell
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open
