Headscale
Hacker ApprovedShares rank 2 of 12 mesh VPNs by recommenders
Free open source self-hosted control server compatible with Tailscale clients, giving full control over your network, though it is not a complete drop-in replacement and can be finicky to set up.
Free open source self-hosted control server compatible with Tailscale clients, giving full control over your network, though it is not a complete drop-in replacement and can be finicky to set up.
102 people gave an opinion
- recommend it
- 79
- criticize it
- 23
- approval share
- 77%
Recommended in 12 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 79 people recommend itNeeds 10 or more, met.
- 3.4 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 12 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Free and open source
“Headscale is open source and it already works. You don't need to rely on anyone to use it”
Comment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember” “the headscale server are both open source, you don't need to rely on commercial entities”
Comment from 2 Apr 2026 in “IPv6 address, as a sentence you can remember” “If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”
Comment from 8 Dec 2025 in “Self-hosting my photos with Immich” - Comment from 14 Jan 2026 in “Ask HN: Vxlan over WireGuard or WireGuard over Vxlan?”
- Comment from 26 Aug 2026 in “Tailcat – Like netcat, but over Tailscale’s data plane”
- Comment from 26 Nov 2025 in “Copyparty, the FOSS file server [video]”
- Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”
Works with Tailscale clients
“If you prefer to self host your orchestrator you can look into Headscale, an alternative that seeks to be compatible with the clients.”
Comment from 24 Dec 2025 in “Unifi Travel Router” “Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients”
Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node” “It's free, works extremely well, and can be used with the official Tailscale clients.”
Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)” - Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”
Full control of your network
“Head scale is a good middle option - it uses Tailscale’s DNS system but you are able to control your network as you would with Wireguard”
Comment from 3 Jan 2026 in “Show HN: uvx ptn, scan a QR, get a terminal in your phone” “I like to self host things so I also self host Headscale (private tailnet)”
Comment from 6 Dec 2025 in “Self-hosting my photos with Immich” “If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”
Comment from 8 Dec 2025 in “Self-hosting my photos with Immich” - Comment from 26 Nov 2025 in “Copyparty, the FOSS file server [video]”
Runs reliably on a cheap VPS
“Headscale turns the $5 VPS into the thing that connects my laptop to my other compute resources while I am out and about.”
Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?” “I've been smoothly running headscale on a hetzner vps for many months now. Works without issues”
Comment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available” “self-hosting headscale in a discarded ThinkCentre and running it from a closet”
Comment from 24 Dec 2025 in “Unifi Travel Router”
What people warn about
Each mark is one comment
Not a complete drop-in replacement
“The headscale API is very different than the Tailscale API so if you're automating setting up clients it's not quite drop in.”
Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node” “I've been really happy with headscale, but I wouldn't call it a complete drop in replacement”
Comment from 31 Mar 2026 in “I Traced My Traffic Through a Home Tailscale Exit Node” Finicky to set up and run
“Headscale mostly works pretty well but its pretty finicky to get set up”
Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)” “requires you to write and mount a complete "config.yaml" before the container will even start”
Comment from 15 Apr 2026 in “Show HN: Docker setup for Headscale (self-hosted Tailscale control server)” “Headscale exists but honestly it's a pain to run compared to just paying Tailscale $18/user.”
Comment from 18 Feb 2026 in “Tailscale Peer Relays is now generally available” Overkill for basic home use
“Tailscale or Headscale (the self-hosted version) are massively overengineered for something as basic as accessing your Linux ISOs from your phone.”
Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?” “Headscale/Tailscale only has value if you are behind a CGNAT, otherwise, it just adds extra management and complexities.”
Comment from 1 Feb 2026 in “Netbird a German Tailscale alternative (P2P WireGuard-based overlay network)”
Other mesh VPNs people recommend
The four most recommended other mesh VPNs, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Tailscale | 809 | 210 | 79% | 12 | 1 yr13 owners | Approved |
| HeadscaleThis page | 79 | 23 | 77% | 12 | — | Approved |
| NetBird | 79 | 25 | 76% | 12 | 2 yrs6 owners | Approved |
| ZeroTier | 19 | 10 | 66% | 9 | — | — |
| Tailscale Peer Relays | 15 | 2 | 88% | 1 | — | — |
What people said
40 of the 114 comments that mention it, newest first. Each links to the original comment.
“I think I'll move my headscale node there, since it has the highest availability”
“Tailscale or Headscale (the self-hosted version) are massively overengineered for something as basic as accessing your Linux ISOs from your phone.”
“Today I use Tailscale (with Headscale as the control plane) for all users”
“Headscale turns the $5 VPS into the thing that connects my laptop to my other compute resources while I am out and about.”
“headscale is an open source alternative that we embrace and encourage people to use”
“The real solution is using something like Pangolin or Tailscale (or Headscale) for this.”
“I had a zero downtime headscale upgrade because once the nodes negotiate through the control plane they can talk to each other all the time.”
“Alternatives are Logmein Hamachi(might be dating myself here, haven't used them in 10+ years), Zerotier, Netbird. Headscale too.”
“mostly groovy but the individual components don't easily seem to be able to connect to a different vpn”
“Unless by "Tailscale" you actually meant your own self-hosted Headscale server”
“the one thing about headscale that I really like is how easy it is for users to just grab the client”
“auto-generates the config from environment variables on first start”
“requires you to write and mount a complete "config.yaml" before the container will even start”
“Headscale is open source and it already works. You don't need to rely on anyone to use it”
“It's much more private and secure to run that Minecraft or Mumble server on an encrypted overlay network”
“the headscale server are both open source, you don't need to rely on commercial entities”
“The headscale API is very different than the Tailscale API so if you're automating setting up clients it's not quite drop in.”
“Headscale works if you want fully self-hosted. The features it doesn't have aren't important to the typical home user.”
“I've been really happy with headscale, but I wouldn't call it a complete drop in replacement”
“Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients”
“which has the blessing of Tailscale and contributions from some of their employees”
“Have a look at Headscale to avoid the cost of Tailscale for small home setups.”
“Headscale is an open source alternative, I haven't read the code but it might be a good place to start”
“Headscale exists but honestly it's a pain to run compared to just paying Tailscale $18/user.”
“I've been smoothly running headscale on a hetzner vps for many months now. Works without issues”
“Headscale/Tailscale only has value if you are behind a CGNAT, otherwise, it just adds extra management and complexities.”
“What I don’t like about headscale is that you can only host a single coordinator server as well.”
“it's clearly a side project that few people within the tailscale company maintain on spare time.”
“Headscale mostly works pretty well but its pretty finicky to get set up”
“I find that quite interesting and it is one of the reasons I've not really considered trying out Headscale myself.”
“It's free, works extremely well, and can be used with the official Tailscale clients.”
“an OSS clone, if you're too paranoid to leave your keys to a company”
“Headscale is only really useful if you need to manage multiple users and/or networks.”
“Head scale is a good middle option - it uses Tailscale’s DNS system but you are able to control your network as you would with Wireguard”
“If you prefer to self host your orchestrator you can look into Headscale, an alternative that seeks to be compatible with the clients.”
“self-hosting headscale in a discarded ThinkCentre and running it from a closet”
“Tailscale/Headscale gives me authenticated, encrypted, NAT-traversing connectivity.”
“If you don't trust Tailscale servers, you can host the open source equivalent, Headscale”
“I like to self host things so I also self host Headscale (private tailnet)”
“Headscale is an open source, self-hosted implementation of the Tailscale control server.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.