Tailscale

Hosted coordination plane over a WireGuard mesh; a new tailnet starts with an allow-all policy.

Provider: default
Kind: VPN gateway
Category: Edge
Official docs: https://tailscale.com/kb/1018/acls

Properties · 5 set by this component

property	type	values	required	kind default	this component
activeActive	boolean	—	no	false	▸ false
bgp	boolean	—	no	false	▸ false
defaultAcl · component property	enum	allow-all \| custom	no	allow-all	inherited
exitNode · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
peerType	enum	site-to-site \| point-to-site \| cloud-to-cloud	no	—	▸ point-to-site
subnetRouter · component property	boolean	—	no	false	inherited
throughputMbps	integer	—	no	—	inherited
topology · component property	enum	mesh \| hub-and-spoke	no	mesh	inherited
tunnelType	enum	ipsec \| ssl \| wireguard	no	—	▸ wireguard

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "tailscale", component: "tailscale" }

Other VPN gateway products · 18

VPN Gatewayalibaba-vpn-gatewayalibabacloudvpn-gateway AWS Client VPNaws-client-vpnawsvpn-gateway AWS Site-to-Site VPNaws-site-to-site-vpnawsvpn-gateway Azure VPN Gatewayazure-vpn-gatewayazurevpn-gateway NetBirdnetbirdvpn-gateway OpenVPNopenvpnvpn-gateway strongSwanstrongswanvpn-gateway Submarinersubmarinervpn-gateway Generic VPN gatewayvpn-gatewayvpn-gateway WireGuardwireguardvpn-gateway ZeroTierzerotiervpn-gateway Cloud VPNgoogle-cloud-vpngcpvpn-gateway IBM Cloud VPN for VPCibm-vpn-gatewayibmvpn-gateway Client VPN for VPCibm-vpn-serveribmvpn-gateway Site-to-Site VPNoci-site-to-site-vpnocivpn-gateway Neutron VPNaaSopenstack-neutron-vpnaasopenstackvpn-gateway Client Gatewayoutscale-client-gatewayoutscalevpn-gateway Virtual Gatewayoutscale-virtual-gatewayoutscalevpn-gateway

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Tailscale: hosted coordination plane over a WireGuard data plane. Devices form a
3# peer-to-peer mesh (tailnet) with end-to-end encryption; per "Tailnet policy file",
4# a new tailnet uses the default allow-all policy until ACLs are written.
5schemaVersion: "1"
6type: "component"
7id: "tailscale"
8kind: "vpn-gateway"
9provider: "default"
10docs: "https://tailscale.com/kb/1018/acls"
11defaults:
12  managed: true
13  tunnelType: "wireguard"
14  peerType: "point-to-site"
15  bgp: false
16  activeActive: false
17properties:
18  topology:
19    type: "enum"
20    values: ["mesh", "hub-and-spoke"]
21    default: "mesh"
22  defaultAcl:
23    type: "enum"
24    values: ["allow-all", "custom"]
25    default: "allow-all"
26  exitNode:
27    type: "boolean"
28    default: false
29  subnetRouter:
30    type: "boolean"
31    default: false

The same page as markdown, for an agent: /catalogue/components/tailscale.md