{"slug":"use-grafana-with-tailscale","title":"Use Grafana with Tailscale","tags":["tailscale"],"agent_summary":"Last validated: Jul 31, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Use Grafana with Tailscale\r\n\r\nLast validated: Jul 31, 2025\r\n\r\nTailscale and [Grafana](https://grafana.com/) can work together in a variety of ways. For example, you can secure access to Grafana dashboards, use Tailscale as an identity provider, or create Grafana dashboards to monitor your Tailscale network (known as a tailnet).\r\n\r\n## [Secure Grafana dashboards with Tailscale](https://tailscale.com/docs/integrations/grafana\\#secure-grafana-dashboards-with-tailscale)\r\n\r\n[Use Tailscale to secure remote access to Grafana dashboards](https://tailscale.com/learn/remote-access-to-grafana-dashboards). You can host your Grafana server within your tailnet to avoid exposing Grafana data to the public internet and control access to dashboards using [access control policies](https://tailscale.com/docs/features/access-control).\r\n\r\n## [Authenticate Grafana users using Tailscale](https://tailscale.com/docs/integrations/grafana\\#authenticate-grafana-users-using-tailscale)\r\n\r\n[Configure Grafana to use Tailscale as its authentication mechanism](https://tailscale.com/blog/grafana-auth) using Tailscale's open source Grafana proxy ( [`proxy-to-grafana`](https://github.com/tailscale/tailscale/tree/main/cmd/proxy-to-grafana)). Tailscale's Grafana proxy identifies users based on their [Tailscale identity](https://tailscale.com/docs/concepts/tailscale-identity) and uses Grafana's [AuthProxy](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/auth-proxy/) to map each user's Tailscale identity to the corresponding Grafana user.\r\n\r\n## [Integrate with Grafana Cloud Private Data Source Connect](https://tailscale.com/docs/integrations/grafana\\#integrate-with-grafana-cloud-private-data-source-connect)\r\n\r\n[Use Private Data Source Connect in Grafana Cloud](https://grafana.com/blog/2025/07/24/securely-query-data-sources-on-your-tailscale-network-using-private-data-source-connect-in-grafana-cloud/) to securely query data sources in your tailnet.\r\n\r\n## [Monitor your tailnet with Grafana](https://tailscale.com/docs/integrations/grafana\\#monitor-your-tailnet-with-grafana)\r\n\r\nCreate a Grafana dashboard to monitor [Tailscale client metrics](https://tailscale.com/docs/reference/tailscale-client-metrics), such as subnet routes, device health, and connectivity data. You can use the data to:\r\n\r\n- Gain insights into how your tailnet is performing.\r\n- Identify [connectivity issues](https://tailscale.com/docs/reference/troubleshooting/connectivity) between devices.\r\n- Track bandwidth usage and plan for capacity needs.\r\n","html":"<h1>Use Grafana with Tailscale</h1>\n<p>Last validated: Jul 31, 2025</p>\n<p>Tailscale and <a href=\"https://grafana.com/\">Grafana</a> can work together in a variety of ways. For example, you can secure access to Grafana dashboards, use Tailscale as an identity provider, or create Grafana dashboards to monitor your Tailscale network (known as a tailnet).</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/grafana#secure-grafana-dashboards-with-tailscale\">Secure Grafana dashboards with Tailscale</a></h2>\n<p><a href=\"https://tailscale.com/learn/remote-access-to-grafana-dashboards\">Use Tailscale to secure remote access to Grafana dashboards</a>. You can host your Grafana server within your tailnet to avoid exposing Grafana data to the public internet and control access to dashboards using <a href=\"https://tailscale.com/docs/features/access-control\">access control policies</a>.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/grafana#authenticate-grafana-users-using-tailscale\">Authenticate Grafana users using Tailscale</a></h2>\n<p><a href=\"https://tailscale.com/blog/grafana-auth\">Configure Grafana to use Tailscale as its authentication mechanism</a> using Tailscale's open source Grafana proxy ( <a href=\"https://github.com/tailscale/tailscale/tree/main/cmd/proxy-to-grafana\"><code>proxy-to-grafana</code></a>). Tailscale's Grafana proxy identifies users based on their <a href=\"https://tailscale.com/docs/concepts/tailscale-identity\">Tailscale identity</a> and uses Grafana's <a href=\"https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/auth-proxy/\">AuthProxy</a> to map each user's Tailscale identity to the corresponding Grafana user.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/grafana#integrate-with-grafana-cloud-private-data-source-connect\">Integrate with Grafana Cloud Private Data Source Connect</a></h2>\n<p><a href=\"https://grafana.com/blog/2025/07/24/securely-query-data-sources-on-your-tailscale-network-using-private-data-source-connect-in-grafana-cloud/\">Use Private Data Source Connect in Grafana Cloud</a> to securely query data sources in your tailnet.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/grafana#monitor-your-tailnet-with-grafana\">Monitor your tailnet with Grafana</a></h2>\n<p>Create a Grafana dashboard to monitor <a href=\"https://tailscale.com/docs/reference/tailscale-client-metrics\">Tailscale client metrics</a>, such as subnet routes, device health, and connectivity data. You can use the data to:</p>\n<ul>\n<li>Gain insights into how your tailnet is performing.</li>\n<li>Identify <a href=\"https://tailscale.com/docs/reference/troubleshooting/connectivity\">connectivity issues</a> between devices.</li>\n<li>Track bandwidth usage and plan for capacity needs.</li>\n</ul>\n"}