Headscale

Headscale is an open source, self-hosted implementation of the Tailscale control server. It coordinates a WireGuard-based overlay network by exchanging node keys, assigning addresses, and managing routes and sharing within a tailnet.

Key Features

• Implements core control-plane functions for a Tailscale-compatible network (tailnet)
• Node registration and coordination via Tailscale clients
• WireGuard key exchange and IP address management
• User/namespace boundaries and machine sharing between users
• Route advertisement and management for subnet routing
• Designed for a single tailnet suited to personal use or small organizations

Use Cases

• Run a private Tailscale-compatible VPN without relying on the hosted control server
• Connect homelab, servers, and remote devices via a WireGuard-based overlay network
• Provide secure remote access and subnet routing for a small team or community project

Limitations and Considerations

• Focused on a narrow scope: a single tailnet rather than large multi-tenant deployments
• Some Tailscale features may be unavailable or behave differently depending on client support and Headscale version

Headscale is a practical choice for self-hosters who want the Tailscale experience with an open control plane. It emphasizes a lean, hobbyist-friendly approach while supporting common coordination features needed for a private overlay network.