Interface reference
A separate public deployment screenshot is not used here because it would be misleading or expose account details. The official project page below is the authoritative visual reference.
Open Tailscale admin documentation →What Tailscale is
Tailscale is a mesh VPN built on WireGuard that creates a secure, encrypted network between all your devices — regardless of where they are. It uses NAT traversal (including DERP relays for networks that block direct UDP) to establish peer-to-peer connections without opening ports, configuring port forwarding or running a VPN concentrator.
Tailscale provides MagicDNS (automatic DNS for device names), subnet routing (accessing entire networks through a gateway node), exit nodes (routing internet traffic through a specific device) and access control lists (ACLs) for fine-grained permission management.
Why I run it
Tailscale is the access layer for the entire lab. I can reach any service, any container, any device from anywhere — my phone, a laptop at a coffee shop, a travel router on hotel Wi-Fi — without exposing anything to the public internet. No port forwarding, no dynamic DNS, no reverse proxy for every service. Just a secure, encrypted mesh that connects everything.
What I have done with it
- Installed Tailscale on every lab host, container and mobile device
- Configured subnet routing to access the entire LAN remotely
- Set up exit nodes for routing internet traffic through the lab (ProtonProxy)
- Used Tailscale on a GL.iNet travel router for secure access on untrusted networks
- Integrated with the Pangolin reverse-proxy bridge for selective service publishing
- Configured ACL policies to restrict access between users and devices
- Used Tailscale exit-node routing to test connectivity under FortiGate application-control policy in an authorised lab
Why this matters
Tailscale solves the remote-access problem cleanly. Instead of managing VPN concentrators, firewall rules and NAT configurations for every service, you install one agent and everything is reachable. Understanding how it works underneath (WireGuard, DERP relays, NAT traversal) is valuable networking knowledge, and using it in practice across a real multi-host lab shows that understanding is applied, not theoretical.