Description

Headscale is an open source, self-hosted Tailscale control server for building WireGuard-based peer-to-peer (P2P) virtual private networks (VPNs). It serves as an open source alternative to Tailscale, allowing users to take full control of their private network infrastructure, freeing them from dependence on official Tailscale cloud services. With Headscale, users can establish encrypted, directly connected communications across devices (e.g., servers, PCs, mobile), supporting intranet penetration, low-latency transmission and cross-platform compatibility (Linux, Windows, macOS, etc.). Its core features include device authentication (based on OAuth/SSO), access control lists (ACLs), and network status monitoring, making it suitable for enterprise intranets, remote offices, IoT device management, and other scenarios. The open source nature makes it highly customizable and suitable for privacy and security focused teams.