{"slug":"access-truenas-scale-from-anywhere","title":"Access TrueNAS SCALE from anywhere","tags":["tailscale","access-control"],"agent_summary":"Last validated: Sep 19, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Access TrueNAS SCALE from anywhere\r\n\r\nLast validated: Sep 19, 2025\r\n\r\n[TrueNAS SCALE](https://www.truenas.com/truenas-scale/) is a Linux-based network-attached storage (NAS) operating system maintained by [iX Systems](https://www.ixsystems.com/). It provides OpenZFS storage technology and lets users run self-hosted applications, remote offsite backups, and virtual machine management capabilities. You can connect your TrueNAS SCALE server to a Tailscale network (known as a tailnet) and securely configure multiple TrueNAS SCALE servers for ZFS replication.\r\n\r\nThere are two kinds of TrueNAS offerings. TrueNAS SCALE is the Linux version and is what we recommend for use with Tailscale. TrueNAS SCALE uses our officially supported and maintained [Tailscale Docker image](https://hub.docker.com/r/tailscale/tailscale).\r\n\r\nTrueNAS Core is the BSD version and is not officially supported. The FreeBSD versions of Tailscale for TrueNAS Core is community-maintained, and the client is available in [FreshPorts](https://www.freshports.org/security/tailscale).\r\n\r\n## [Requirements](https://tailscale.com/docs/integrations/truenas\\#requirements)\r\n\r\n- At least one TrueNAS SCALE server with administrative access.\r\n- An existing tailnet with admin access. For instructions, refer to [Tailscale quickstart](https://tailscale.com/docs/how-to/quickstart).\r\n- You must be an [Owner, Admin, or IT admin](https://tailscale.com/docs/reference/user-roles) of a tailnet for some actions needed in the admin console.\r\n\r\n## [Generate authentication keys](https://tailscale.com/docs/integrations/truenas\\#generate-authentication-keys)\r\n\r\nThere are multiple ways of [adding new devices](https://tailscale.com/docs/features/access-control/device-management/how-to/set-up) to a tailnet. For servers, such as TrueNAS SCALE, we recommend generating and using [authentication (auth) keys](https://tailscale.com/docs/features/access-control/auth-keys). Specifying an auth key during Tailscale setup will automatically join the device to your tailnet.\r\n\r\nTo generate an auth key:\r\n\r\n1. Go to the [Keys](https://login.tailscale.com/admin/settings/keys) page of the admin console and select **Generate auth key**.\r\n2. In the **Description** field, enter a name for the TrueNAS SCALE server.\r\n3. (Optional) Toggle **Reusable** to on if you want to assign the same auth key to multiple TrueNAS SCALE servers if you plan on adding multiple TrueNAS SCALE server to your tailnet.\r\n\r\n## [Install and configure Tailscale](https://tailscale.com/docs/integrations/truenas\\#install-and-configure-tailscale)\r\n\r\n1. Open TrueNAS SCALE and select the **Apps** tab.\r\n2. Select **Check for available apps**, then find and install the Tailscale app.\r\n\r\nIf this is not a new set up, the **Check for available apps** button may not appear.\r\n\r\n1. Select **Edit** for the Tailscale app.\r\n2. In the **Auth Key** field, add the authentication key you generated in the previous section.\r\n3. In the **Hostname** field, enter the hostname for the server in the tailnet.\r\n4. Check the **Userspace** box.\r\n5. Select **Save**.\r\n\r\nYou can now verify that your TrueNAS SCALE server is connected to the tailnet in the Tailscale by going to the [Machines](https://login.tailscale.com/admin/machines) page of the admin console and verifying that you can find the TrueNAS SCALE server in your tailnet.\r\n\r\n## [Route tailnet traffic through TrueNAS](https://tailscale.com/docs/integrations/truenas\\#route-tailnet-traffic-through-truenas)\r\n\r\nYou can configure TrueNAS SCALE as an [exit node](https://tailscale.com/docs/features/exit-nodes) to route traffic for other devices in the tailnet through your TrueNAS SCALE server. This is useful when accessing untrusted Wi-Fi in a cafe or using an online service (such as banking) only available in your home country from overseas.\r\n\r\n1. Open TrueNAS SCALE.\r\n1. Select the **Apps** tab and open the Tailscale app settings.\r\n2. Check the **Exit node** box.\r\n2. Go to the [Machines](https://login.tailscale.com/admin/machines) page of the Tailscale admin console.\r\n1. Locate the TrueNAS SCALE server in the list. It should display the **Exit Node** badge.\r\n2. Select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu, then select **Edit route settings**.\r\n3. Check the **Use as exit node** box, then select **Save**.\r\n\r\nTo allow other devices to use the TrueNAS SCALE server as an exit node, refer to [Use exit nodes](https://tailscale.com/docs/features/exit-nodes/how-to/setup#use-an-exit-node).\r\n\r\n## [Route non-tailnet traffic through TrueNAS](https://tailscale.com/docs/integrations/truenas\\#route-non-tailnet-traffic-through-truenas)\r\n\r\nYou can configure TrueNAS as a [subnet router](https://tailscale.com/docs/features/subnet-routers) for your tailnet, in cases where you can't install Tailscale on every device on your physical network.\r\n\r\n1. Open TrueNAS SCALE.\r\n1. Select the **Apps** tab and open the Tailscale app settings.\r\n2. In the **Route** field, add a CIDR IP range to indicate which subnet will have access to the tailnet such as `192.168.0.0/24`. You can add multiple routes for multiple subnets.\r\n2. Go to the [Machines](https://login.tailscale.com/admin/machines) page of the admin console and locate the TrueNAS server in the list. It should display the **Subnets** badge.\r\n1. Select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu, then select **Edit route settings**.\r\n2. Check the IP range boxes that correspond to the subnet routes you want to advertise, then select **Save**.\r\n\r\n## [Configure TrueNAS ZFS replication](https://tailscale.com/docs/integrations/truenas\\#configure-truenas-zfs-replication)\r\n\r\nConfigure TrueNAS SCALE settings to allow ZFS replication for backing up files across multiple TrueNAS SCALE servers over your tailnet. This lets you replicate to remote systems without opening ports or routing traffic through bastion servers or proxies using Tailscale's direct device-to-device connections.\r\n\r\n1. Open TrueNAS SCALE, go to the **Apps** tab, locate the installed Tailscale app, and select **Edit**.\r\n1. Uncheck the **Userspace** box and check the **Host Network** box.\r\n2. Select **Save**.\r\n2. Go to the **Network** tab and in the **Interfaces** section, locate `tailscale0` to confirm that rebinding occurred and there is a two-way Tailscale connection between the two TrueNAS SCALE servers.\r\n3. Go to the **System Settings** tab, and select **General**.\r\n1. In the **GUI** section, select **Settings**.\r\n2. In the **Web Interface IPv4 Address** field make sure the IP address is `0.0.0.0`.\r\n3. Select **Save**.\r\n4. Go to the **System Settings** tab and select **Services**.\r\n1. Locate **SSH**, select the **Edit** icon, and select **Advanced Settings**.\r\n2. In the **Bind Interfaces** drop-down, select `tailscale0`.\r\n3. Select **Save**.\r\n5. Go to the **Credentials** tab, then **Backup Credentials**.\r\n1. In the **SSH Connections** section, select **Add**.\r\n2. In the **Name** field, enter a name to identify the SSH connection.\r\n3. In the **Host** field, enter the `100.x.y.z` tailnet address for the TrueNAS SCALE server. This IP address can be found in the [Machines](https://login.tailscale.com/admin/machines) page of the Tailscale admin console.\r\n4. Select **Save**.\r\n6. Go to the **Data Protection** tab. In the **Replication Tasks** section, select **Add**.\r\n1. In the **SSH Connections** drop-down box, select the SSH name added in the previous step.\r\n2. In the **SSH Transfer Security** section, make sure **Encryption** is selected.\r\n3. In the same window, select **Advanced Replication Creation**.\r\n4. In the **Transport** drop-down box, select `SSH+NETCAT` to optimize file transfer speed between two TrueNAS SCALE servers.\r\n5. Select **Save**.\r\n\r\nSpecial thanks to [Tom Lawrence](https://x.com/tomlawrencetech) at [Lawrence Systems](https://lawrencesystems.com/) for the guidance on this topic.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"

Access TrueNAS SCALE from anywhere

\n

Last validated: Sep 19, 2025

\n

TrueNAS SCALE is a Linux-based network-attached storage (NAS) operating system maintained by iX Systems. It provides OpenZFS storage technology and lets users run self-hosted applications, remote offsite backups, and virtual machine management capabilities. You can connect your TrueNAS SCALE server to a Tailscale network (known as a tailnet) and securely configure multiple TrueNAS SCALE servers for ZFS replication.

\n

There are two kinds of TrueNAS offerings. TrueNAS SCALE is the Linux version and is what we recommend for use with Tailscale. TrueNAS SCALE uses our officially supported and maintained Tailscale Docker image.

\n

TrueNAS Core is the BSD version and is not officially supported. The FreeBSD versions of Tailscale for TrueNAS Core is community-maintained, and the client is available in FreshPorts.

\n

Requirements

\n\n

Generate authentication keys

\n

There are multiple ways of adding new devices to a tailnet. For servers, such as TrueNAS SCALE, we recommend generating and using authentication (auth) keys. Specifying an auth key during Tailscale setup will automatically join the device to your tailnet.

\n

To generate an auth key:

\n
    \n
  1. Go to the Keys page of the admin console and select Generate auth key.
    2. \n
  2. In the Description field, enter a name for the TrueNAS SCALE server.
    3. \n
  3. (Optional) Toggle Reusable to on if you want to assign the same auth key to multiple TrueNAS SCALE servers if you plan on adding multiple TrueNAS SCALE server to your tailnet.
    4. \n
\n

Install and configure Tailscale

\n
    \n
  1. Open TrueNAS SCALE and select the Apps tab.
    2. \n
  2. Select Check for available apps, then find and install the Tailscale app.
    3. \n
\n

If this is not a new set up, the Check for available apps button may not appear.

\n
    \n
  1. Select Edit for the Tailscale app.
    2. \n
  2. In the Auth Key field, add the authentication key you generated in the previous section.
    3. \n
  3. In the Hostname field, enter the hostname for the server in the tailnet.
    4. \n
  4. Check the Userspace box.
    5. \n
  5. Select Save.
    6. \n
\n

You can now verify that your TrueNAS SCALE server is connected to the tailnet in the Tailscale by going to the Machines page of the admin console and verifying that you can find the TrueNAS SCALE server in your tailnet.

\n

Route tailnet traffic through TrueNAS

\n

You can configure TrueNAS SCALE as an exit node to route traffic for other devices in the tailnet through your TrueNAS SCALE server. This is useful when accessing untrusted Wi-Fi in a cafe or using an online service (such as banking) only available in your home country from overseas.

\n
    \n
  1. Open TrueNAS SCALE.
    2. \n
  2. Select the Apps tab and open the Tailscale app settings.
    3. \n
  3. Check the Exit node box.
    4. \n
  4. Go to the Machines page of the Tailscale admin console.
    5. \n
  5. Locate the TrueNAS SCALE server in the list. It should display the Exit Node badge.
    6. \n
  6. Select the \"ellipsis menu, then select Edit route settings.
    7. \n
  7. Check the Use as exit node box, then select Save.
    8. \n
\n

To allow other devices to use the TrueNAS SCALE server as an exit node, refer to Use exit nodes.

\n

Route non-tailnet traffic through TrueNAS

\n

You can configure TrueNAS as a subnet router for your tailnet, in cases where you can't install Tailscale on every device on your physical network.

\n
    \n
  1. Open TrueNAS SCALE.
    2. \n
  2. Select the Apps tab and open the Tailscale app settings.
    3. \n
  3. In the Route field, add a CIDR IP range to indicate which subnet will have access to the tailnet such as 192.168.0.0/24. You can add multiple routes for multiple subnets.
    4. \n
  4. Go to the Machines page of the admin console and locate the TrueNAS server in the list. It should display the Subnets badge.
    5. \n
  5. Select the \"ellipsis menu, then select Edit route settings.
    6. \n
  6. Check the IP range boxes that correspond to the subnet routes you want to advertise, then select Save.
    7. \n
\n

Configure TrueNAS ZFS replication

\n

Configure TrueNAS SCALE settings to allow ZFS replication for backing up files across multiple TrueNAS SCALE servers over your tailnet. This lets you replicate to remote systems without opening ports or routing traffic through bastion servers or proxies using Tailscale's direct device-to-device connections.

\n
    \n
  1. Open TrueNAS SCALE, go to the Apps tab, locate the installed Tailscale app, and select Edit.
    2. \n
  2. Uncheck the Userspace box and check the Host Network box.
    3. \n
  3. Select Save.
    4. \n
  4. Go to the Network tab and in the Interfaces section, locate tailscale0 to confirm that rebinding occurred and there is a two-way Tailscale connection between the two TrueNAS SCALE servers.
    5. \n
  5. Go to the System Settings tab, and select General.
    6. \n
  6. In the GUI section, select Settings.
    7. \n
  7. In the Web Interface IPv4 Address field make sure the IP address is 0.0.0.0.
    8. \n
  8. Select Save.
    9. \n
  9. Go to the System Settings tab and select Services.
    10. \n
  10. Locate SSH, select the Edit icon, and select Advanced Settings.
    11. \n
  11. In the Bind Interfaces drop-down, select tailscale0.
    12. \n
  12. Select Save.
    13. \n
  13. Go to the Credentials tab, then Backup Credentials.
    14. \n
  14. In the SSH Connections section, select Add.
    15. \n
  15. In the Name field, enter a name to identify the SSH connection.
    16. \n
  16. In the Host field, enter the 100.x.y.z tailnet address for the TrueNAS SCALE server. This IP address can be found in the Machines page of the Tailscale admin console.
    17. \n
  17. Select Save.
    18. \n
  18. Go to the Data Protection tab. In the Replication Tasks section, select Add.
    19. \n
  19. In the SSH Connections drop-down box, select the SSH name added in the previous step.
    20. \n
  20. In the SSH Transfer Security section, make sure Encryption is selected.
    21. \n
  21. In the same window, select Advanced Replication Creation.
    22. \n
  22. In the Transport drop-down box, select SSH+NETCAT to optimize file transfer speed between two TrueNAS SCALE servers.
    23. \n
  23. Select Save.
    24. \n
\n

Special thanks to Tom Lawrence at Lawrence Systems for the guidance on this topic.

\n

\"Project

\n

Ask AI

\n

reCAPTCHA

\n

Recaptcha requires verification.

\n

protected by reCAPTCHA

\n"}