Create and run a self-hosted VPN server on your own cloud or dedicated server with Amnezia.
Headscale
Headscale provides a self-hosted, open-source version of the Tailscale control server.
About Headscale
Headscale is an open-source, self-hosted implementation of the Tailscale control server. Tailscale is a VPN built on WireGuard, and its control server exchanges WireGuard public keys between nodes, assigns client IP addresses, separates users, enables sharing machines between users, and exposes the advertised routes of nodes. Headscale aims to provide an alternative to that control server that users run themselves.
Headscale has a narrow scope: it supports a single Tailscale network (tailnet), intended for personal use or a small open-source organization. The project is not associated with Tailscale Inc., although one active maintainer is employed by Tailscale. The maintainers state that they do not support or encourage running Headscale behind reverse proxies or in containers. Development builds from the main branch are available as container images and binaries, but the main branch may contain unreleased changes.
Key features
- Acts as a self-hosted control server for a Tailscale-style network
- Exchanges WireGuard public keys between nodes in the network
- Assigns IP addresses to clients
- Separates users and allows machines to be shared between users
- Exposes the advertised routes of network nodes
- Includes a NixOS module in the repository's nix directory
Best for: Self-hosters and hobbyists who want to run a single personal tailnet or a small open-source organization's network.
Good for
- Open source, so the control server code can be inspected and modified
- Self-hosted, so the operator runs the control server on their own infrastructure
- Provides a NixOS module for NixOS users
Watch out for
- Designed for a single tailnet, so it is not intended for multiple large networks
- Maintainers do not support or encourage running it behind reverse proxies or in containers
- Development builds from the main branch may contain unreleased changes
Headscale at a glance
- Category
- Privacy & Security › VPNs
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Headscale alternatives
Tools and sites you could use instead, ranked by how closely they match.
Deploy Algo, a self-hosted personal VPN server designed by Trail of Bits for ease of setup and secure connections.
Use OpenVPN for secure business access and remote work, with self-hosted or cloud-managed options.
This project sets up an IPsec VPN server with IPsec/L2TP, Cisco IPsec, and IKEv2, plus client configuration and management scripts.
SimpleDnsCrypt manages dnscrypt-proxy, with a project fork that addresses issues in an earlier version.
Open source
23 alternatives
Connect to WireGuard or AmneziaWG servers on Android with WG Tunnel, an open-source client.
Open source
24 alternativesPopular in VPNs
Well-known listings from the same topic.
Cloudflare Tunnelsdevelopers.cloudflare.com/cloudflare-one/conne…WireGuardwireguard.comAmneziaamnezia.orgVPN Jantitvpnjantit.comNetBirdnetbird.ioMullvad VPNmullvad.net
Headscale FAQ
Is Headscale affiliated with Tailscale Inc.?
The project states that it is not associated with Tailscale Inc. One of its active maintainers is employed by Tailscale and may spend work hours contributing to the project.
Can Headscale run in a container or behind a reverse proxy?
The maintainers state that they do not support nor encourage the use of reverse proxies and containers to run Headscale.
How many tailnets does Headscale support?
Its scope is a single Tailscale network (tailnet), suitable for personal use or a small open-source organization.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.