- Tailscale
- WireGuard-based
- Exit node
- systemd
Tailscale VPS HostingA private network and your own exit node
Tailscale joins your devices into one private network. On a VPS it gives you SSH without exposing a port, and it can act as an exit node that routes your internet traffic through a datacentre of your choice. We install it on a hardened server and leave the account to you.
- KVM virtualisation
- NVMe storage
- Root SSH access
- Free one-time setup
- 99.9% uptime SLA
$systemctl list-units --type=service --state=active
- tailscaledTailscale daemon
- ufwfirewall: 22
- fail2banSSH brute-force guard
- unattended-upgradessecurity updates
Installed and secured before handover.
Why Put Tailscale on a VPS
A VPS is an always-on, public machine. Tailscale makes it a private one for you and a useful gateway for your devices.
Reach it without exposing SSH
Close port 22 to the internet and connect over the tailnet.
Your own exit node
Send traffic out through a server in another country or city.
A bridge to private services
Reach databases and admin panels that listen only on the tailnet.
One network for all devices
Laptop, phone and servers share private addresses.
How Tailscale Fits on Your Server
The Tailscale daemon joins the server to your tailnet; routing is optional.
-
Daemon
tailscaled
Runs as a systemd service and keeps the server on your tailnet.
-
Authentication
Your Tailscale account
You log the server in with a link from the sudo tailscale up command.
-
Exit node (optional)
IP forwarding + advertise-exit-node
Lets other devices route their internet traffic through this server.
-
Access rules
Your Tailscale policy
Who can reach the server and use it as an exit node.
Engineer's notes
- You need a Tailscale account; their plans and limits apply and are separate from our VPS plans.
- For an exit node, turn on IP forwarding with the sysctl lines from Tailscale, then advertise the node and approve it in the admin console.
- Tailscale's docs advise that your firewall should deny forwarding by default; ufw does.
- If you use firewalld instead of ufw, Tailscale notes you may need to allow masquerading.
- 22SSH, or reach it over the tailnet instead
What You Can Run
Private SSH access
Reach the server over the tailnet; close SSH to the internet.
An exit node
Route your laptop or phone traffic through your VPS.
A subnet router
Give your tailnet access to a private network behind the server.
Private admin panels
Expose dashboards only to your tailnet.
A bridge between sites
Connect home, office and cloud machines.
A stable address for devices
Reach machines behind changing home IPs.
Which Plan for Your Tailnet Server
Throughput and the services you add decide the size, not Tailscale itself.
VPS-4
8 vCores and 3 Gbps; mind the monthly allowance in Mumbai, Singapore and Sydney.
A starting point, not a limit: every plan upgrades in place, keeping your data, IP address and configuration.
Joining Your Server to Tailscale
These steps follow Tailscale's own Linux and exit node guides.
-
Install Tailscale
Tailscale's one-line install script.
curl -fsSL https://tailscale.com/install.sh | sh -
Log the server in
Open the link it prints and sign in to your tailnet.
sudo tailscale up -
Turn on IP forwarding (exit node only)
The lines from Tailscale's subnet router guide.
echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.confecho 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.confsudo sysctl -p /etc/sysctl.d/99-tailscale.conf -
Advertise it as an exit node
Then approve it under Machines in the admin console.
sudo tailscale set --advertise-exit-nodesudo tailscale up -
Use it from another device
Replace the address with the exit node's Tailscale IP.
sudo tailscale set --exit-node=100.x.y.z
Example commands: adjust names, paths and versions to your project. Deploying and maintaining your application is yours to do, or ask us for a quote.
Tailscale commands you will use every week
Copy, paste, adjust the names. Each one is safe to run as your own user on the server.
Status of your tailnet
tailscale statusThis server's Tailscale address
tailscale ip -4Stop using an exit node
sudo tailscale set --exit-node=Restart the daemon
sudo systemctl restart tailscaledUpdate Tailscale
sudo apt-get update && sudo apt-get install --only-upgrade tailscaleTest connectivity to a device
tailscale ping device-nameA Commercial VPN or Your Own Exit Node?
A VPN service is quick and shared. Your own exit node is private and yours.
Commercial VPN service
- Who shares the addressMany customers
- Where you exitThe provider's list
- Reach your own devicesNot the purpose
- PricingPer month subscription
- Server administrationHandled by the provider
Tailscale exit node
- Who shares the addressOnly you and your team
- Where you exitOne of our 11 locations
- Reach your own devicesYes: one private network
- PricingVPS cost plus your Tailscale plan
- Server administrationYours, after our free setup
Your Tailscale server
Free one-time setup before you get access. Here is what happens, and what you receive.
Pick a plan and a location
Resources that fit your workload, in the datacentre closest to your users.
Tell us your Tailscale setup
Versions, database and domain: at order or right after.
We install and secure it
Server hardened, the stack installed and tested, HTTPS on your domain.
You get root
SSH to a working server, ready for your code and data.
Installed for you
- Tailscale installed from Tailscale's own package, running as a service
- The firewall left open for SSH only; we open no extra ports for Tailscale
- IP forwarding prepared on request, if you want an exit node
- Logging in, approving the node and your access rules are done by you in your Tailscale account
Secured before handover
- Non-root sudo user created for daily work
- SSH key login, password login for root disabled
- Firewall (UFW) open only for the ports you use
- Fail2ban blocking repeated login attempts
- Automatic security updates enabled
- Free Let's Encrypt SSL on your domain
- Timezone, swap and hostname configured
Not included (we say so up front)
- Ongoing server administration
- Application maintenance and updates
- Debugging your code
- Migrating existing sites or data
Security and Performance for Tailscale
Security
- Close public SSH once you can reach the server over the tailnet.
- Use Tailscale's access policy so only the right people can use the exit node.
- Keep the operating system and Tailscale updated.
- Remove devices you no longer use from your tailnet.
Performance
- Pick the location nearest to you or to the sites you visit.
- Mind the monthly traffic allowance in Mumbai, Singapore and Sydney.
- Do not run heavy file transfers through a small plan.
- Check tailscale status if connections go through a relay.
Built from the official documentation
VPS Plans for Tailscale
Tailscale is very light. VPS-1 is plenty for private access and an exit node for yourself or a small team.
VPS-1
Small websites, APIs, bots and development servers.
- 2 vCores
- 4 GB RAM
- 40 GB NVMe
- 500 Mbps
- Full root and SSH access
- Free initial stack installation
- Server hardening and firewall setup
- Daily backup of the previous 24 hours
- Unlimited traffic *
- Anti-DDoS protection
- Dedicated IPv4 and IPv6
- KVM virtualisation
VPS-2
Production apps, WordPress and online stores.
- 4 vCores
- 8 GB RAM
- 75 GB NVMe
- 1 Gbps
- Full root and SSH access
- Free initial stack installation
- Server hardening and firewall setup
- Daily backup of the previous 24 hours
- Unlimited traffic *
- Anti-DDoS protection
- Dedicated IPv4 and IPv6
- KVM virtualisation
VPS-3
Busy stores, SaaS products and several projects.
- 6 vCores
- 12 GB RAM
- 100 GB NVMe
- 2 Gbps
- Full root and SSH access
- Free initial stack installation
- Server hardening and firewall setup
- Daily backup of the previous 24 hours
- Unlimited traffic *
- Anti-DDoS protection
- Dedicated IPv4 and IPv6
- KVM virtualisation
VPS-4
High-traffic apps, large databases and agencies.
- 8 vCores
- 24 GB RAM
- 200 GB NVMe
- 3 Gbps
- Full root and SSH access
- Free initial stack installation
- Server hardening and firewall setup
- Daily backup of the previous 24 hours
- Unlimited traffic *
- Anti-DDoS protection
- Dedicated IPv4 and IPv6
- KVM virtualisation
* Unlimited traffic in Europe and North America. In Mumbai, Singapore and Sydney a monthly allowance applies (VPS-1 500 GB, VPS-2/VPS-3 1 TB, VPS-4 3 TB), then speed is limited to 10 Mbps until the next month.
Prices exclude 18% GST, which is added to invoices for customers in India.
Platform specs and locations
The same KVM platform on every plan; only CPU, RAM, storage and port speed change.
- Virtualisation
- KVM with reserved vCores and RAM
- Storage
- NVMe SSD on every plan
- Network
- Dedicated IPv4 and IPv6, 500 Mbps to 3 Gbps per plan
- Operating systems
- Ubuntu 26.04, 24.04 and 22.04 LTS · Debian 13, 12 and 11 · AlmaLinux · Rocky Linux · Fedora · FreeBSD
- Access
- Full root over SSH, key-based login
- Backups
- Automatic daily backup of the previous 24 hours; snapshots and longer retention on request
- Protection
- Always-on anti-DDoS mitigation
- Availability
- 99.9% uptime SLA
Asia-Pacific
- Mumbai
- Singapore
- Sydney
Europe
- London
- Limburg
- Roubaix
- Gravelines
- Strasbourg
- Milan
- Warsaw
North America
- Beauharnois
Availability per location changes with demand; we confirm your location before setup. In Mumbai, Singapore and Sydney each plan includes a monthly traffic allowance (VPS-1 500 GB, VPS-2 and VPS-3 1 TB, VPS-4 3 TB); beyond it, speed is limited to 10 Mbps until the next month.
Questions before you deploy
Not covered here? Ask an engineer before you order.
Ready when you are
Build Your Private Network
Choose a plan and we hand over a hardened server with Tailscale installed, ready for your tailnet.