Hacker ApprovedDepartments

Headscale

Hacker Approved

Shares rank 2 of 12 mesh VPNs by recommenders

Free open source self-hosted control server compatible with Tailscale clients, giving full control over your network, though it is not a complete drop-in replacement and can be finicky to set up.

Free open source self-hosted control server compatible with Tailscale clients, giving full control over your network, though it is not a complete drop-in replacement and can be finicky to set up.

102 people gave an opinion

recommend it
79
criticize it
23
approval share
77%
Each figure is one person. RecommendsCriticizes

Recommended in 12 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it carries the badge

  • 79 people recommend itNeeds 10 or more, met.
  • 3.4 recommenders for every criticNeeds 2 to 1 or better, met.
  • Recommended in 12 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Free and open source

    “Headscale is open source and it already works. You don't need to rely on anyone to use it”

    Comment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember”

    “the headscale server are both open source, you don't need to rely on commercial entities”

    Comment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember”

    “If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”

    Comment from 8 Dec 2025 in “Self-hosting my photos with Immich”
  • Works with Tailscale clients

    “If you prefer to self host your orchestrator you can look into Headscale, an alternative that seeks to be compatible with the clients.”

    Comment from 24 Dec 2025 in “Unifi Travel Router”

    “Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients”

    Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

    “It's free, works extremely well, and can be used with the official Tailscale clients.”

    Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”
  • Full control of your network

    “Head scale is a good middle option - it uses Tailscale’s DNS system but you are able to control your network as you would with Wireguard”

    Comment from 3 Jan 2026 in “Show HN: uvx ptn, scan a QR, get a terminal in your phone”

    “I like to self host things so I also self host Headscale (private tailnet)”

    Comment from 6 Dec 2025 in “Self-hosting my photos with Immich”

    “If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”

    Comment from 8 Dec 2025 in “Self-hosting my photos with Immich”
  • Runs reliably on a cheap VPS

    “Headscale turns the $5 VPS into the thing that connects my laptop to my other compute resources while I am out and about.”

    Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

    “I've been smoothly running headscale on a hetzner vps for many months now. Works without issues”

    Comment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available”

    “self-hosting headscale in a discarded ThinkCentre and running it from a closet”

    Comment from 24 Dec 2025 in “Unifi Travel Router”

What people warn about

Each mark is one comment

  • Not a complete drop-in replacement

    “The headscale API is very different than the Tailscale API so if you're automating setting up clients it's not quite drop in.”

    Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

    “I've been really happy with headscale, but I wouldn't call it a complete drop in replacement”

    Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”
  • Finicky to set up and run

    “Headscale mostly works pretty well but its pretty finicky to get set up”

    Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

    “requires you to write and mount a complete "config.yaml" before the container will even start”

    Comment from 15 Apr 2026 in “Show HN: Docker setup for Headscale (self-hosted Tailscale control server)”

    “Headscale exists but honestly it's a pain to run compared to just paying Tailscale $18/user.”

    Comment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available”
  • Overkill for basic home use

    “Tailscale or Headscale (the self-hosted version) are massively overengineered for something as basic as accessing your Linux ISOs from your phone.”

    Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

    “Headscale/Tailscale only has value if you are behind a CGNAT, otherwise, it just adds extra management and complexities.”

    Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

Other mesh VPNs people recommend

The four most recommended other mesh VPNs, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Headscale compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Tailscale80921079%121 yr13 ownersApproved
HeadscaleThis page792377%12—Approved
NetBird792576%122 yrs6 ownersApproved
ZeroTier191066%9——
Tailscale Peer Relays15288%1——
See all 12 mesh VPNs, ranked

What people said

40 of the 114 comments that mention it, newest first. Each links to the original comment.

“I think I'll move my headscale node there, since it has the highest availability”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“Tailscale or Headscale (the self-hosted version) are massively overengineered for something as basic as accessing your Linux ISOs from your phone.”

CriticizesComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“Today I use Tailscale (with Headscale as the control plane) for all users”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“Headscale turns the $5 VPS into the thing that connects my laptop to my other compute resources while I am out and about.”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“headscale is an open source alternative that we embrace and encourage people to use”

RecommendsComment from 26 Aug 2026 in “Tailcat – Like netcat, but over Tailscale’s data plane”

“The real solution is using something like Pangolin or Tailscale (or Headscale) for this.”

RecommendsComment from 15 Aug 2026 in “I close SSH port 22 (and what I use instead)”

“I had a zero downtime headscale upgrade because once the nodes negotiate through the control plane they can talk to each other all the time.”

RecommendsComment from 12 Aug 2026 in “Tailscale Traces Database Corruption to 16y/o SQLite WAL-Reset Bug”

“Alternatives are Logmein Hamachi(might be dating myself here, haven't used them in 10+ years), Zerotier, Netbird. Headscale too.”

MixedComment from 31 Jul 2026 in “Tailscale didn't stop the Hugging Face intrusion”

“mostly groovy but the individual components don't easily seem to be able to connect to a different vpn”

MixedComment from 4 Jul 2026 in “Immich v3.0.0 Released”

“Unless by "Tailscale" you actually meant your own self-hosted Headscale server”

MixedComment from 18 May 2026 in “Syncthing over Tailscale”

“the one thing about headscale that I really like is how easy it is for users to just grab the client”

MixedComment from 21 Apr 2026 in “Year of the IPv6 Overlay Network”

“auto-generates the config from environment variables on first start”

RecommendsComment from 15 Apr 2026 in “Show HN: Docker setup for Headscale (self-hosted Tailscale control server)”

“requires you to write and mount a complete "config.yaml" before the container will even start”

CriticizesComment from 15 Apr 2026 in “Show HN: Docker setup for Headscale (self-hosted Tailscale control server)”

“Headscale is open source and it already works. You don't need to rely on anyone to use it”

RecommendsComment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember”

“It's much more private and secure to run that Minecraft or Mumble server on an encrypted overlay network”

RecommendsComment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember”

“the headscale server are both open source, you don't need to rely on commercial entities”

RecommendsComment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember”

“The headscale API is very different than the Tailscale API so if you're automating setting up clients it's not quite drop in.”

MixedComment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

“Headscale works if you want fully self-hosted. The features it doesn't have aren't important to the typical home user.”

MixedComment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

“I've been really happy with headscale, but I wouldn't call it a complete drop in replacement”

MixedComment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

“Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients”

RecommendsComment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node”

“which has the blessing of Tailscale and contributions from some of their employees”

RecommendsComment from 27 Mar 2026 in “Hold on to Your Hardware”

“Have a look at Headscale to avoid the cost of Tailscale for small home setups.”

RecommendsComment from 8 Mar 2026 in “My Homelab Setup”

“Headscale is an open source alternative, I haven't read the code but it might be a good place to start”

RecommendsComment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available”

“Headscale exists but honestly it's a pain to run compared to just paying Tailscale $18/user.”

CriticizesComment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available”

“I've been smoothly running headscale on a hetzner vps for many months now. Works without issues”

RecommendsComment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available”

“Headscale/Tailscale only has value if you are behind a CGNAT, otherwise, it just adds extra management and complexities.”

CriticizesComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“What I don’t like about headscale is that you can only host a single coordinator server as well.”

MixedComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“it's clearly a side project that few people within the tailscale company maintain on spare time.”

MixedComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“Headscale mostly works pretty well but its pretty finicky to get set up”

MixedComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“I find that quite interesting and it is one of the reasons I've not really considered trying out Headscale myself.”

MixedComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“It's free, works extremely well, and can be used with the official Tailscale clients.”

RecommendsComment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”

“an OSS clone, if you're too paranoid to leave your keys to a company”

RecommendsComment from 14 Jan 2026 in “Ask HN: Vxlan over WireGuard or WireGuard over Vxlan?”

“Headscale is only really useful if you need to manage multiple users and/or networks.”

MixedComment from 12 Jan 2026 in “2026 is the Year of Self-hosting”

“Head scale is a good middle option - it uses Tailscale’s DNS system but you are able to control your network as you would with Wireguard”

RecommendsComment from 3 Jan 2026 in “Show HN: uvx ptn, scan a QR, get a terminal in your phone”

“If you prefer to self host your orchestrator you can look into Headscale, an alternative that seeks to be compatible with the clients.”

RecommendsComment from 24 Dec 2025 in “Unifi Travel Router”

“self-hosting headscale in a discarded ThinkCentre and running it from a closet”

RecommendsComment from 24 Dec 2025 in “Unifi Travel Router”

“Tailscale/Headscale gives me authenticated, encrypted, NAT-traversing connectivity.”

RecommendsComment from 21 Dec 2025 in “I spent a week without IPv4 (2023)”

“If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”

RecommendsComment from 8 Dec 2025 in “Self-hosting my photos with Immich”

“I like to self host things so I also self host Headscale (private tailnet)”

RecommendsComment from 6 Dec 2025 in “Self-hosting my photos with Immich”

“Headscale is an open source, self-hosted implementation of the Tailscale control server.”

RecommendsComment from 26 Nov 2025 in “Copyparty, the FOSS file server [video]”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.