AWS Site-to-Site VPN vs Tailscale
AWS Site-to-Site VPN
aws.amazon.comTailscale
tailscale.comSide by side
| Figure | AWS Site-to-Site VPN | Tailscale |
|---|---|---|
| Price from | $0.01/mo | $1/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 5 | 8 |
| Spec score · Business VPN Software | 8.1 (#40) | 9.4 (#5) |
| Free plan | No | Yes |
| Monitoring | VPN logs can be published to Amazon CloudWatch Logs and include IPsec tunnel, IKE negotiation, dead peer detection, BGP status, and routing-update details. | Features include configuration audit logs, network flow logs, webhooks, and log streaming to SIEM integration partners. |
Plans
AWS Site-to-Site VPN
- Site-to-Site VPN connection$0.05 a month
- 5 Gbps Site-to-Site VPN connection$0.61 a month
- Site-to-Site VPN Concentrator$1.95 a month
- VPN Concentrator site connection$0.01 a month
- Standard Site-to-Site VPN connection (1.25 Gbps)$0.05 a month
Tailscale
- PersonalFree
- Standard$8 a month
- Premium$18 a month
- Additional tagged resources$1 a month
- Add more tagged resources$1 a month
- Mullvad$5 a month
- Mullvad add-on$5 a month
- EnterprisePriced on request
In their own words
AWS Site-to-Site VPN
AWS Site-to-Site VPN has no write-up on Specifiction yet; its figures are above.
Tailscale
Tailscale is a zero-config VPN for connecting users and devices across a network. It uses WireGuard to form low-latency peer-to-peer connections, which Tailscale says are end-to-end encrypted so it cannot read users’ traffic. Administrators can use access control lists to specify which users may connect to which devices. Supported identity providers handle authentication, and SCIM supports user and group provisioning. Monitoring features include configuration audit logs, network flow logs, webhooks, and log streaming to SIEM partners. Device posture information can be used in connectivity rules. Taildrop transfers files between devices, while node sharing lets users share a node without exposing it to the public internet. The service runs on Android, iOS, Linux, macOS, web, and Windows. Personal is free forever for non-commercial use and supports up to six users; Standard costs $8 per user per month. Premium costs $18 per user per month and includes priority support.