Tailscale

Tailscale is a Zero Trust identity-based connectivity platform built on WireGuard® that replaces legacy VPNs, SASE, and PAM solutions. It creates a secure mesh overlay network (tailnet) that connects remote teams, multi-cloud environments, CI/CD pipelines, Edge & IoT devices, and AI workloads with minimal configuration. Tailscale deploys in minutes, works across all major operating systems and cloud providers, and enforces least-privilege access using identity-aware access control lists (ACLs).

• Zero Trust networking — Enforce identity-based access controls using your existing identity provider (Okta, Entra ID, custom OIDC) with SSO, MFA, and SCIM provisioning.
• WireGuard® encryption — All traffic is end-to-end encrypted using WireGuard®, establishing direct peer-to-peer connections between nodes to minimize latency.
• MagicDNS — Automatically assigns human-readable DNS names to devices and services on your tailnet, eliminating the need to manage IP addresses manually.
• Subnet routers & exit nodes — Extend your tailnet to existing subnets, VPCs, and corporate LANs without installing Tailscale on every device, and route internet traffic through designated exit nodes.
• Tailscale SSH — Authenticate and encrypt SSH connections using Tailscale identity instead of managing SSH keys, certificates, or bastions.
• Tailscale Funnel — Expose services on your tailnet to the public internet without opening firewall ports, available on Premium and above.
• Kubernetes Operator — Provide full ingress and egress connectivity from Kubernetes clusters to non-Kubernetes resources and enable cross-cluster peering.
• Access Control Lists (ACLs) — Define granular network policies as code, manage them via GitOps workflows, and test them before deployment.
• Device posture management — Collect device attributes and enforce connectivity rules based on security posture, with integrations for third-party posture tools.
• Monitoring & compliance — Stream configuration audit logs and network flow logs to any SIEM or observability tool; record Tailscale SSH and Kubernetes Operator sessions.
• Infrastructure as Code — Manage your tailnet configuration using Terraform or Pulumi providers.
• Cross-platform support — Available on Linux, macOS, Windows, iOS, Android, and deployable via CLI, API, and over 100 integrations.