VPN Control Server
37.6k 2026-04-18
juanfont/headscale
An open-source, self-hosted implementation of the Tailscale control server, enabling private overlay networks built on WireGuard.
Core Features
Self-host your own Tailscale control plane.
Manages WireGuard key exchange and IP address assignment for network nodes.
Defines user boundaries and enables machine sharing within a private network.
Exposes advertised routes for connected devices.
Designed for personal use or small open-source organizations with a single tailnet.
Detailed Introduction
Headscale is an open-source, self-hosted alternative to the proprietary control server component of Tailscale. Built on WireGuard, Tailscale creates secure overlay networks. Headscale empowers self-hosters and hobbyists to manage their own private 'tailnet' by handling key exchange, IP assignment, and network configuration for their devices. It offers a narrow scope, focusing on a single Tailscale network, making it ideal for personal projects or small organizational needs, providing full control over the VPN infrastructure.