How Tailscale's WireGuard-based mesh VPN works, subnet routers for LAN access, exit nodes, MagicDNS with split DNS for internal services, ACL policy files, and Headscale as a self-hosted control plane alternative.
Headscale
-
Tailscale for Homelab Networking -
Tailscale: The WireGuard Mesh VPN That Actually Works Everywhere A deep technical guide to Tailscale: how the mesh VPN works under the hood, complete setup for every platform, subnet routing and exit nodes for homelab access, ACL policy files, MagicDNS, Tailscale Funnel and Serve, self-hosting the control plane with Headscale, and an honest comparison with WireGuard, ZeroTier, and Netbird.