Networking
Tailscale as a personal mesh — six months in
A short note on why having a stable private IP from anywhere changed the way I think about home infrastructure. No port forwarding, no DDNS, no VPN appliances.
EEberhard1 min read
The shift
I used to expose services from home via port forwarding, hardened SSH, dynamic DNS, and a lot of hope. Every new box was another firewall rule.
Tailscale flipped that. The Pi at home, the VPS in Frankfurt, my laptop at a coffee shop — they all have stable private addresses and can reach each other without me opening anything to the public internet.
What I actually use it for
- SSH from my phone to the Pi without touching the router
- Plex streaming when I am on the road
- Talking to a private Postgres from my laptop
- Pushing to a self-hosted Gitea
The downside
If Tailscale control plane went away, my mesh would not keep working forever — the data plane is WireGuard, but identity and discovery flow through their service.
Filed under
tailscalewireguardhome-labmesh-vpn