{"slug":"production-best-practices","title":"Production best practices","tags":["tailscale"],"agent_summary":"Last validated: May 23, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Production best practices\r\n\r\nLast validated: May 23, 2025\r\n\r\n[**Deployment checklist** \\\\\r\n\\\\\r\nYour checklist to ensure a successful Tailscale deployment.](https://tailscale.com/docs/reference/deployment-checklist) [**Key and secret management** \\\\\r\n\\\\\r\nManage the various types of keys and secrets for your tailnet.](https://tailscale.com/docs/reference/key-secret-management) [**Scanning for exposed Tailscale secrets** \\\\\r\n\\\\\r\nFind out how Tailscale partners scan for exposed Tailscale secrets and provide notifications to help prevent fraudulent access.](https://tailscale.com/docs/integrations/secret-scanning) [**Admin account with passkey login** \\\\\r\n\\\\\r\nProactively set up an admin user that can log in to your tailnet with a passkey, to mitigate against a future SSO lockout.](https://tailscale.com/docs/reference/tailnet-passkey-admin) [**Performance best practices** \\\\\r\n\\\\\r\nGet the most performance out of your Tailscale deployment.](https://tailscale.com/docs/reference/best-practices/performance) [**AWS reference architecture** \\\\\r\n\\\\\r\nDeploy Tailscale to Amazon Web Services (AWS) with best practices, security, and production readiness in mind.](https://tailscale.com/docs/reference/reference-architectures/aws) [**Azure reference architecture** \\\\\r\n\\\\\r\nDeploy Tailscale to Microsoft Azure with best practices, security, and production readiness in mind.](https://tailscale.com/docs/reference/reference-architectures/azure) [**Google Cloud Platform reference architecture** \\\\\r\n\\\\\r\nDeploy Tailscale to Google Cloud Platform (GCP) with best practices, security, and production readiness in mind.](https://tailscale.com/docs/reference/reference-architectures/gcp)\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Production best practices</h1>\n<p>Last validated: May 23, 2025</p>\n<p><a href=\"https://tailscale.com/docs/reference/deployment-checklist\"><strong>Deployment checklist</strong> \\\r\n\\\r\nYour checklist to ensure a successful Tailscale deployment.</a> <a href=\"https://tailscale.com/docs/reference/key-secret-management\"><strong>Key and secret management</strong> \\\r\n\\\r\nManage the various types of keys and secrets for your tailnet.</a> <a href=\"https://tailscale.com/docs/integrations/secret-scanning\"><strong>Scanning for exposed Tailscale secrets</strong> \\\r\n\\\r\nFind out how Tailscale partners scan for exposed Tailscale secrets and provide notifications to help prevent fraudulent access.</a> <a href=\"https://tailscale.com/docs/reference/tailnet-passkey-admin\"><strong>Admin account with passkey login</strong> \\\r\n\\\r\nProactively set up an admin user that can log in to your tailnet with a passkey, to mitigate against a future SSO lockout.</a> <a href=\"https://tailscale.com/docs/reference/best-practices/performance\"><strong>Performance best practices</strong> \\\r\n\\\r\nGet the most performance out of your Tailscale deployment.</a> <a href=\"https://tailscale.com/docs/reference/reference-architectures/aws\"><strong>AWS reference architecture</strong> \\\r\n\\\r\nDeploy Tailscale to Amazon Web Services (AWS) with best practices, security, and production readiness in mind.</a> <a href=\"https://tailscale.com/docs/reference/reference-architectures/azure\"><strong>Azure reference architecture</strong> \\\r\n\\\r\nDeploy Tailscale to Microsoft Azure with best practices, security, and production readiness in mind.</a> <a href=\"https://tailscale.com/docs/reference/reference-architectures/gcp\"><strong>Google Cloud Platform reference architecture</strong> \\\r\n\\\r\nDeploy Tailscale to Google Cloud Platform (GCP) with best practices, security, and production readiness in mind.</a></p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}