Headscale
Self-hosted control server compatible with Tailscale clients
oss-osi-approved planned guideOverview
Headscale implements an open-source control server for the Tailscale client ecosystem. Teams wanting WireGuard mesh convenience with self-hosted coordination evaluate Headscale carefully against Tailscale SaaS terms.
At a glance
| Field | Value |
|---|---|
| Categories | network-wifi, security-compliance |
| Deployment | self-hosted |
| License class | oss-osi-approved (BSD-3-Clause) |
| Cost model | free-self-hosted |
| Implementation difficulty | hard |
| Maintenance burden | medium |
| Maturity | stable |
| Verification | partially-verified (2026-07-17) |
Cost reality
Free control server; clients are Tailscale’s. Review Tailscale client terms for your use.
Pricing and free-tier limits change frequently; re-check official pricing before budget decisions.
Tasks reduced or augmented
Software does not replace community or ops staff. It may reduce or augment:
- Mesh VPN coordination
- Reducing public exposure of admin UIs
Human oversight still needed
- Client license/terms
- ACL design
- Key/node lifecycle
Data held
-
node registrations
-
user identities
-
ACL policies
-
Personal data: yes
-
Payment data: no / not primary
Risks
| Area | Notes |
|---|---|
| Vendor lock-in | Evaluate export formats and API completeness before deep customization. |
| Security | Apply updates promptly; restrict admin access; enable TLS. |
| Compliance | Operator remains responsible for privacy and local regulatory obligations. |
| Licensing | Confirm license fits commercial coworking use. |
| Operational | Plan backups, monitoring, and a restore drill before production use. |
Coworking fit
Roles: technical-operator, multi-location-operator
Workflows: multi-site-rollout, access-provisioning
Problems: self-host-for-data-control, multi-location-consistency
Smallest useful experiment
Connect three admin devices in a staging tailnet and access one internal dashboard.
Typical time to first value: 1–3 days
Links
Implementation guide
A routable implementation guide is not currently published.
Verification
- Status:
partially-verified - Last reviewed:
2026-07-17 - Sources:
Seed entry compiled from official project sites and repositories. Re-verify pricing, license text, and feature claims before production decisions. Star counts and free-tier numeric limits intentionally omitted unless verified at review time.