Last validated: Jan 29, 2026
\nAccess control \\\r\n\\\r\nUnderstand the options available for access control in Tailscale. Customize Tailscale using system policies \\\r\n\\\r\nA list of configuration keys you can use to customize the Tailscale client using system policies, including MDM. Device posture management \\\r\n\\\r\nUse device posture for enforcing device rules in your tailnet. Ephemeral nodes \\\r\n\\\r\nUse ephemeral nodes in Tailscale for managing short-lived devices like containers and CI/CD systems. Exit nodes (route all traffic) \\\r\n\\\r\nRoute all internet traffic through a specific device on your network. Firewall mode in tailscaled \\\r\n\\\r\nUnderstand the different firewall modes supported by Tailscale on Linux devices. Group devices with tags \\\r\n\\\r\nUse Tailscale tags to authenticate and identify non-user devices, such as a server. How app connectors work \\\r\n\\\r\nRoute SasS application traffic in your tailnet using app connectors. Kubernetes operator \\\r\n\\\r\nExpose your Kubernetes cluster to your Tailscale network. Logging overview \\\r\n\\\r\nUnderstand Tailscale's logging infrastructure. macOS and iOS shortcuts \\\r\n\\\r\nUnderstand how Tailscale works with the Shortcuts app, allowing you to automate tasks. MagicDNS \\\r\n\\\r\nFind out how to automatically register DNS names for devices in your Tailscale network. Manage multiple tailnets \\\r\n\\\r\nManage multiple tailnets under a single organization. OAuth clients \\\r\n\\\r\nUse OAuth clients to provide ongoing access to the Tailscale API. Secure node state storage \\\r\n\\\r\nEncrypt Tailscale node state at rest. Share your machines with other users \\\r\n\\\r\nGive a Tailscale user on another tailnet access to a private machine within your tailnet, without exposing the machine publicly. Site-to-site networking \\\r\n\\\r\nConnect two subnets in your tailnet with each other. Subnet routers \\\r\n\\\r\nUse subnet routers to give devices outside your local network access to services within specific subnets. Extend your private network with Tailscale. Taildrive \\\r\n\\\r\nShare folders securely between devices on your Tailscale network. Taildrop \\\r\n\\\r\nSend files between your personal devices on a Tailscale network. Tailnet Lock \\\r\n\\\r\nEnsure that no node joins your tailnet unless trusted nodes in your tailnet sign the new node. Tailnet policy file \\\r\n\\\r\nUnderstand the tailnet policy file. Tailscale Funnel \\\r\n\\\r\nSecurely route internet traffic to local services using Tailscale Funnel. Tailscale Peer Relays \\\r\n\\\r\nUse Tailscale Peer Relays for client-to-client connections when direct connections aren't possible. Tailscale Serve \\\r\n\\\r\nExplore the Tailscale Serve service. Tailscale Services \\\r\n\\\r\nSecurely connect to and manage access to your internal resources using Tailscale Services. Tailscale SSH \\\r\n\\\r\nUse Tailscale SSH to manage the authentication and authorization of SSH connections in your tailnet. tsidp \\\r\n\\\r\nUse tsidp to secure any service that supports OIDC/OAuth with no additional login while on a tailnet, including self-hosted apps like Grafana and MCP servers. tsnet \\\r\n\\\r\nUse the tsnet package to embed Tailscale inside a Go program. Use device posture for just-in-time access \\\r\n\\\r\nUse device posture for just-in-time access to resources in your tailnet. User & group provisioning \\\r\n\\\r\nLearn about the System for Cross-domain Identity Management (SCIM) identity providers that Tailscale supports. Viewing the list of endpoints on your network \\\r\n\\\r\nFind out how to monitor and easily connect to the endpoints running on machines in your Tailscale network. Visual policy editor \\\r\n\\\r\nUpdate your tailnet policy file with the visual policy editor. Webhooks \\\r\n\\\r\nSet up a webhook to receive notification of events on your Tailscale network. Workload identity federation \\\r\n\\\r\nUse federated OIDC workload identities from third-party providers to authenticate requests to the Tailscale API.
\n"}