Headscale

Spec sheet

Purpose

Headscale is an open-source, self-hosted implementation of the Tailscale control server.Read 11 Oct 2026 · headscale.net

Intended users

The project targets self-hosters and hobbyists, with a single tailnet intended for personal use or a small open-source organisation.Read 11 Oct 2026 · headscale.net

API

Headscale provides HTTP REST and gRPC interfaces for web interfaces, remote control, and custom integrations, and both require an API key.Read 11 Oct 2026 · headscale.net

Support

The project points users to its Discord server for community support.Read 11 Oct 2026 · headscale.net

Access controls

The features page lists access control lists, API-based ACL management, some autogroups, auto approvers, and Tailscale SSH.Read 11 Oct 2026 · headscale.net

Access model

vpnRead 22 Sep 2026 · headscale.net

Admin control level

standardRead 22 Sep 2026 · headscale.net

Client platforms

The documentation lists Linux, OpenBSD, FreeBSD, Windows, Android, macOS, and iOS as supported client operating systems.Read 11 Oct 2026 · headscale.net

Database

The project recommends SQLite and says PostgreSQL is supported but in maintenance mode.Read 11 Oct 2026 · headscale.net

Deployment support

The project says it officially supports binaries and DEB packages, while Docker deployments are not officially supported.Read 11 Oct 2026 · headscale.net

Device posture

NoRead 22 Sep 2026 · headscale.net

Identity integration

Node registration supports OpenID Connect, but OIDC groups cannot be used in ACLs.Read 11 Oct 2026 · headscale.net

Installation

Official releases are provided as binaries for various platforms and DEB packages for Debian and Ubuntu; supported DEB distributions are Ubuntu 22.04 or newer and Debian 12 or newer.Read 11 Oct 2026 · headscale.net

Networking features

Listed features include node registration, MagicDNS, split DNS, Taildrop, tags, subnet routers, exit nodes, IPv4 and IPv6, and embedded DERP.Read 11 Oct 2026 · headscale.net

Project maintainers

The documentation names Kristoffer Dalby and Juan Font as maintainers.Read 11 Oct 2026 · headscale.net

Scaling limitation

The FAQ says Headscale is not enterprise software and performance is not a development focus; many nodes with frequent network changes can keep resource usage high and cause it to fall behind.Read 11 Oct 2026 · headscale.net

Site-to-site networking

YesRead 22 Sep 2026 · headscale.net

SSO / SCIM

YesRead 22 Sep 2026 · headscale.net

Supported platforms

Linux,OpenBSD,FreeBSD,Windows,Android,macOS,iOS,tvOSRead 22 Sep 2026 · headscale.net

Transport security

The service can expose its web service over TLS and supports certificate configuration or automatic certificate acquisition through Let's Encrypt.Read 11 Oct 2026 · headscale.net

Plans and prices

Every Headscale plan and price →

Where Specifiction places it

• Virtual Private Network Software#16 of 548.6
• Business VPN Software#38 of 948.2