{"slug":"technical-overviews","title":"Technical overviews","tags":["tailscale"],"agent_summary":"Last validated: Feb 13, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Technical overviews\r\n\r\nLast validated: Feb 13, 2025\r\n\r\nThis section contains in-depth topics about networking and security in a Tailscale network (known as a tailnet).\r\n\r\n## [Networking and device connectivity](https://tailscale.com/docs/concepts\\#networking-and-device-connectivity)\r\n\r\nTailscale modernizes your network through underlying technology to securely connect users, services, and devices.\r\n\r\n[**How Tailscale assigns IP addresses** \\\\\r\n\\\\\r\nUnderstand how Tailscale assigns stable IP addresses based on the device and authorization credentials.](https://tailscale.com/docs/concepts/ip-and-dns-addresses) [**Device connectivity** \\\\\r\n\\\\\r\nUnderstand connectivity between Tailscale devices.](https://tailscale.com/docs/reference/device-connectivity) [**DERP servers** \\\\\r\n\\\\\r\nTailscale uses Designated Encrypted Relay for Packets (DERP) servers for secure, low-latency connections in your tailnet. Customization options let you optimize device communication and NAT traversal.](https://tailscale.com/docs/reference/derp-servers) [**IPv4 vs. IPv6 FAQ** \\\\\r\n\\\\\r\nAnswers to common questions around IPv6.](https://tailscale.com/docs/reference/faq/ipv6)\r\n\r\n## [Security, authentication, and encryption](https://tailscale.com/docs/concepts\\#security-authentication-and-encryption)\r\n\r\nTailscale enforces secure authorization and encryption for tailnet traffic based on identity.\r\n\r\n[**Protect your SSH servers using Tailscale** \\\\\r\n\\\\\r\nUnderstand how Tailscale works well with SSH clients and SSH servers, improving security and offering a better user experience.](https://tailscale.com/docs/reference/ssh-over-tailscale) [**Node keys** \\\\\r\n\\\\\r\nHow Tailscale uses node keys as the mechanism for which machines can join a tailnet.](https://tailscale.com/docs/concepts/node-keys) [**Tailscale encryption** \\\\\r\n\\\\\r\nReview how Tailscale uses encryption.](https://tailscale.com/docs/concepts/tailscale-encryption) [**Tailscale identity** \\\\\r\n\\\\\r\nUnderstand how identity is established and used in Tailscale.](https://tailscale.com/docs/concepts/tailscale-identity)\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Technical overviews</h1>\n<p>Last validated: Feb 13, 2025</p>\n<p>This section contains in-depth topics about networking and security in a Tailscale network (known as a tailnet).</p>\n<h2><a href=\"https://tailscale.com/docs/concepts#networking-and-device-connectivity\">Networking and device connectivity</a></h2>\n<p>Tailscale modernizes your network through underlying technology to securely connect users, services, and devices.</p>\n<p><a href=\"https://tailscale.com/docs/concepts/ip-and-dns-addresses\"><strong>How Tailscale assigns IP addresses</strong> \\\r\n\\\r\nUnderstand how Tailscale assigns stable IP addresses based on the device and authorization credentials.</a> <a href=\"https://tailscale.com/docs/reference/device-connectivity\"><strong>Device connectivity</strong> \\\r\n\\\r\nUnderstand connectivity between Tailscale devices.</a> <a href=\"https://tailscale.com/docs/reference/derp-servers\"><strong>DERP servers</strong> \\\r\n\\\r\nTailscale uses Designated Encrypted Relay for Packets (DERP) servers for secure, low-latency connections in your tailnet. Customization options let you optimize device communication and NAT traversal.</a> <a href=\"https://tailscale.com/docs/reference/faq/ipv6\"><strong>IPv4 vs. IPv6 FAQ</strong> \\\r\n\\\r\nAnswers to common questions around IPv6.</a></p>\n<h2><a href=\"https://tailscale.com/docs/concepts#security-authentication-and-encryption\">Security, authentication, and encryption</a></h2>\n<p>Tailscale enforces secure authorization and encryption for tailnet traffic based on identity.</p>\n<p><a href=\"https://tailscale.com/docs/reference/ssh-over-tailscale\"><strong>Protect your SSH servers using Tailscale</strong> \\\r\n\\\r\nUnderstand how Tailscale works well with SSH clients and SSH servers, improving security and offering a better user experience.</a> <a href=\"https://tailscale.com/docs/concepts/node-keys\"><strong>Node keys</strong> \\\r\n\\\r\nHow Tailscale uses node keys as the mechanism for which machines can join a tailnet.</a> <a href=\"https://tailscale.com/docs/concepts/tailscale-encryption\"><strong>Tailscale encryption</strong> \\\r\n\\\r\nReview how Tailscale uses encryption.</a> <a href=\"https://tailscale.com/docs/concepts/tailscale-identity\"><strong>Tailscale identity</strong> \\\r\n\\\r\nUnderstand how identity is established and used in Tailscale.</a></p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}