{"slug":"tailscale","title":"Tailscale","description":"The zero-config mesh VPN built on WireGuard: how it works, subnet routers, exit nodes, MagicDNS, app connectors, ACLs and grants, identity/SSO, device and user management, the CLI and API, and the security model.","tags":["tailscale","vpn","wireguard","networking","devtools","mesh"],"category":"devtools","scope":{"covers":"Tailscale (zero-config mesh VPN on WireGuard): how it works (coordination server, WireGuard data plane, STUN/DERP NAT traversal), the tailnet and 100.x addressing, install and the CLI, subnet routers, exit nodes, MagicDNS, app connectors, the tailnet policy file (ACLs and grants), device tags/key-expiry/Tailnet-Lock, identity/SSO and user/org management, the API and auth keys, and the security model with firewall ports - with verbatim CLI flags and policy syntax.","notCovered":"Step-by-step use-case tutorials (hosting a specific app, game servers, etc.); detailed commercial pricing tiers; client source-level internals; and vendor-specific integrations beyond how they connect. For those, see tailscale.com/kb or the integration's own docs.","currentAs":"2026-07-07"},"lastUpdated":"2026-07-07","documentCount":21,"raw_base":"/raw/tailscale/","html_base":"/wiki/tailscale/","xl":null,"documents":[{"path":"README.md","title":"LLM Wiki","type":null,"updated":null,"gated":false},{"path":"wiki/index.md","title":"Tailscale Knowledge Base — Index","type":"index","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/access-controls.md","title":"Access Controls (Tailnet Policy File, ACLs, and Grants)","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/api-and-automation.md","title":"Tailscale API, automation, and logging","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/app-connectors.md","title":"App connectors","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/cli-reference.md","title":"CLI Reference","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/device-management.md","title":"Device Management (Tags, Key Expiry, Tailnet Lock)","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/exit-nodes.md","title":"Exit nodes","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/how-tailscale-works.md","title":"How Tailscale Works","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/identity-and-sso.md","title":"Identity and SSO","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/install-and-first-use.md","title":"Install and First Use","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/magicdns-and-dns.md","title":"MagicDNS and DNS","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/security-model.md","title":"Tailscale security and trust model","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/subnet-routers.md","title":"Subnet routers","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/tailnet-and-addressing.md","title":"Tailnet and Addressing","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/users-and-organization.md","title":"Users and Organization","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/concepts/what-is-tailscale.md","title":"What is Tailscale?","type":"concept","updated":"2026-07-07","gated":false},{"path":"wiki/log.md","title":"Activity Log","type":"log","updated":null,"gated":false},{"path":"wiki/syntheses/acls-vs-grants.md","title":"ACLs vs. grants in the tailnet policy file","type":"synthesis","updated":"2026-07-07","gated":false},{"path":"wiki/syntheses/routing-mechanisms-compared.md","title":"Routing mechanisms compared: subnet routers vs. exit nodes vs. app connectors","type":"synthesis","updated":"2026-07-07","gated":false},{"path":"wiki/syntheses/tailscale-vs-vpn.md","title":"Tailscale vs. a traditional VPN","type":"synthesis","updated":"2026-07-07","gated":false}]}