juanfont/headscale

Did you try Headscale? https://github.com/juanfont/headscale or netbird? The latter has been great for me.

There is a well documented opensource alternative to Tailscale - Headscale. The tailscale client is already opensource, Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients: https://github.com/juanfont/headscale If you can be bothered running the headscale container, you generally don't need to pay for tailscale. It's been pretty well supported and widely used for a number of years at this point. Tailscale even permit their own engineers to contribute to headscale, as the company sees it as complimentary to the commercial offering.

Or Headscale, which has the blessing of Tailscale and contributions from some of their employees. https://github.com/juanfont/headscale

Headscale is an open source alternative, I haven't read the code but it might be a good place to start: https://github.com/juanfont/headscale

> Also, sometimes it seems like I get rate limited on Tailscale. As I understand it if everything is working properly you should end up with a peer to peer wireguard connection after initial connection using tailscales infrastructure. ie, there should be nothing to rate limit. There are exceptions depending on your network environment where you need one of the relays noted in this post. As for opensource alternatives: https://github.com/juanfont/headscale can replace tailscales initial coordination servers and https://netbird.io/ seemed to be a rapidly developing full stack alternative.

Just arrived from perusing the headscale repo for the nth time. I really should deploy one of these days... https://github.com/juanfont/headscale

Headscale can help here, if you're willing to host it. https://github.com/juanfont/headscale

> my home internet goes, currently the devices disconnect from each other. You might be able to solve this by hosting your own control plane such as Headscale. Instead of having Tailscale manage/coordinate all the nodes on tailnet. https://github.com/juanfont/headscale

The control plane of Tailscale can even be self-hosted via the Headscale project: https://github.com/juanfont/headscale As for backups, I like both https://github.com/restic/restic and https://github.com/kopia/kopia/ . Encryption is done client-side, so the only thing the offsite host receives is encrypted blobs.

You can use headscale [1] (open source) as the mothership, and all the published clients (AFAIK) support pointing them to an alternative mothership. I set it up, and it worked, but regular Tailscale works so well out-of-the-box that I just used that instead of maintaining headscale. [1] https://github.com/juanfont/headscale

> Did you try Headscale? https://github.com/juanfont/headscale or netbird? Am aware of them but IIRC they are both unaudited which kind of brings us back to square one ? We would still end up running them at arms-length as we do with Tailscale at the moment. Isn't Headscale server-side only ? Also a bit strange that "Tailscale vs Netbird" doesn't feature more prominently on their "Compare Netbird" page. It is hidden behind "Load More". ;D

…fig, know what the config keys mean†, keep this machine up 100% of the time, stay on top of updates, don't get haxx0red” compared to “install this app, log in, and enter your credit card details”. † Do you really expect the app-and-credit-card crowd (who are totally valid and deserve working mesh networking that doesn't spy on them!!) to know what even one of the keys in this config means? Really? https://github.com/juanfont/headscale/blob/main/config-example.yaml