TailscaleGuide — Mesh VPN guides for tailnets and ACL policy

Mesh VPN guides for tailnets and ACL policy

TailscaleGuide
Independent · 2026

Dark isometric scene of a home server, data-center racks, laptop, desktop, phone, and padlock joined by cyan private-network links.

Comparisons

Headscale vs Tailscale Explained: What Actually Differs

Headscale replaces one Tailscale component: the control server. What that buys you, the three features it does not implement, and where the pricing flips.

Read the article →

Latest guides

Isometric subnet routing setup with servers, a central router, network adapter, switch and monitor linked by cyan cables beside a padlock.

Networking

Tailscale Subnet Router Configuration: Routes, ACLs, Tests

Advertise LAN routes, approve them with autoApprovers, scope access with grants, and handle the SNAT, MTU and…

Dark isometric network scene with three shielded LANs linked to a central router, Ethernet adapters, and a glowing internet globe.

Networking

Tailscale Exit Node Setup: Linux, ACLs, VLANs, and Tests

Configure a Linux Tailscale exit node, approve it, scope access with grants, isolate it on a VLAN, and verify…

Flat isometric illustration of a pink cube and a pink cloud shape linked by thin lines to a scatter of glowing pink nodes and a hexagon on dark navy.

Comparisons

Tailscale vs ZeroTier vs NetBird: Mesh VPNs Compared

Self-host the control plane or not, L3 overlay or L2 bridge, policy file or console. The three questions that…

Flat isometric illustration of a pink archway with a padlock standing beneath it, ringed by glowing pink node pucks joined by thin connecting lines.

Troubleshooting

Tailscale Slow? Fix DERP Relay and Throughput Issues

Fix slow Tailscale transfers by checking for a DERP relay, restoring direct UDP, then tuning Linux offload, C…

Flat isometric illustration of a glowing pink node mesh arching over a horseshoe shape, with dashed link lines crossing toward a pink laptop at lower right.

Setup Guides

How to Set Up Tailscale: First Tailnet Guide

Install Tailscale, connect two devices, verify a direct path, configure MagicDNS, replace default allow-all a…

Isometric white cube linked by glowing lines to pink cubes ringing a diamond platform below a stacked node, representing a mesh VPN coordination plane

Networking

How a Tailscale Mesh VPN Works: Coordination, NAT and ACLs

Understand the tailnet model: WireGuard mesh tunnels, the coordination plane, DERP relays, identity-based ACL…

Start here

Four pages cover most of what people arrive looking for.

How a Tailscale mesh VPN works
The model underneath everything else: coordination plane, NAT traversal, DERP relays, identity-based access rules.
Tailscale setup guide
Install to first tailnet in the order the decisions actually arrive, including closing the allow-all policy a new tailnet ships with.
Why Tailscale throughput is slow
Diagnose in priority order: relayed path first, then NAT traversal, then offload, CPU and whatever is forwarding in the middle.
Tailscale vs ZeroTier vs NetBird
Control plane ownership, network layer and policy model are the three questions that decide it. Headscale placed as well.
Latency and throughput estimator
Put your own measured baseline against direct, peer-relay and DERP paths and see which ceiling is binding.