DEV Community

Alex Spinov
Alex Spinov

Posted on

Tailscale Has a Free VPN — Connect All Your Devices Without Port Forwarding

#networking #devops #security #selfhosted

The Networking Problem

You have a dev server at home. A Raspberry Pi running Home Assistant. A database on a VPS. A laptop at a coffee shop.

Connecting them requires: port forwarding on your router, dynamic DNS, SSL certificates, firewall rules, and a VPN server you maintain.

Or you could use Tailscale.

Tailscale: WireGuard VPN Without the Pain

Tailscale creates a mesh VPN between your devices using WireGuard. Every device gets a stable IP. No port forwarding. No firewall config. No central VPN server.

Free Tier

  • 100 devices (more than enough for personal use)
  • 3 users on the network
  • Unlimited bandwidth
  • All platforms: macOS, Windows, Linux, iOS, Android

Setup in 60 Seconds 

# Install (macOS)
brew install tailscale
tailscale up

# Install (Linux)
curl -fsSL https://tailscale.com/install.sh | sh
tailscale up
Enter fullscreen mode Exit fullscreen mode

Log in with Google/GitHub. Both devices are now on the same network. Access your home server from anywhere in the world.

Why Developers Love It

1. SSH Into Anything From Anywhere

# Before: complex SSH tunneling
ssh -J jump@bastion.example.com user@internal-server -p 2222

# After: just SSH
ssh user@my-server  # Tailscale handles everything
Enter fullscreen mode Exit fullscreen mode

2. Access Self-Hosted Services

Run Grafana, Gitea, or n8n on your home server. Access from your phone at a cafe. No Cloudflare Tunnel setup. No nginx reverse proxy.

http://my-homelab:3000  ← Grafana, from anywhere
http://my-homelab:8080  ← n8n, from anywhere
http://my-homelab:3001  ← Gitea, from anywhere
Enter fullscreen mode Exit fullscreen mode

3. Tailscale SSH (No Keys!)

tailscale up --ssh
Enter fullscreen mode Exit fullscreen mode

Tailscale handles SSH authentication. No SSH keys to manage. No authorized_keys files. Login with your identity provider.

4. MagicDNS

Every device gets a DNS name:

my-laptop.tail1234.ts.net
my-server.tail1234.ts.net
my-pi.tail1234.ts.net
Enter fullscreen mode Exit fullscreen mode

No IPs to remember. No /etc/hosts to edit.

Tailscale vs Traditional VPNs

Feature Tailscale OpenVPN WireGuard (manual)
Setup time 1 min 1+ hour 30+ min
Port forwarding Not needed Required Required
Central server None (mesh) Required Required
Key management Automatic Manual Manual
NAT traversal Built-in Complex Manual
Free tier 100 devices No Free (DIY)

When to Not Use Tailscale

  • Anonymous browsing: Tailscale is not a privacy VPN (use Mullvad)
  • Large enterprise: May prefer self-hosted Headscale
  • Performance-critical: Direct WireGuard may be marginally faster

Install 

curl -fsSL https://tailscale.com/install.sh | sh
tailscale up
Enter fullscreen mode Exit fullscreen mode

Need data from the web? 88+ scrapers on Apify — extract from any website, deploy to your own infrastructure. Custom solutions: spinov001@gmail.com

Top comments (0)