You’re at a coffee shop, hotel, or your parents’ house — and you suddenly realize you need a file that’s sitting on your home PC. Or you want to check in on your Plex server, your NAS, your Pi-hole stats, or anything else buried behind your home router. Normally, that’d mean fumbling with port forwarding, dynamic DNS, or some sketchy third-party tunneling service. With Tailscale, it takes about ten minutes to set up a Tailscale home network and you never have to think about it again.
Tailscale is a zero-config VPN built on WireGuard — the same protocol that’s powering a lot of modern enterprise VPNs. But where WireGuard requires you to manage keys, ports, and configs manually, Tailscale wraps all of that into an app you install and forget. Every device on your “tailnet” gets a stable private IP address, and they can talk to each other securely regardless of what network they’re on. No port forwarding. No firewall rules. No headaches.
Why Tailscale Is Different (and Way Easier Than a “Real” VPN)
If you’ve ever tried to set up a Tailscale home network the hard way using a traditional VPN, you know the pain. You pick a solution — OpenVPN, WireGuard, WireGuard over something else — and suddenly you’re deep in a rabbit hole of key generation, firewall configs, and hoping your ISP doesn’t change your IP address on you.
Tailscale sidesteps all of that. You download the app on each device, sign in with a Google or GitHub account, and Tailscale handles the key exchange and connection negotiation automatically. Every device gets a 100.x.x.x Tailscale IP that’s permanent and consistent. Your laptop is always 100.x.y.z no matter where it is. Your home server is always its own address. They can always reach each other.
It pairs beautifully with other self-hosted tools too — like Pi-hole, which routes all your DNS through your Tailscale home network for network-wide ad blocking even on mobile. It uses a relay network called DERP as a fallback, but in practice most connections punch through NAT directly using peer-to-peer WireGuard tunnels. The latency is nearly identical to a direct connection. And the free tier covers up to 100 devices and 3 users — more than enough for a personal homelab.
Setting Up Your Tailscale Home Network: The Basic Three-Step
Here’s the honest truth — setting up a Tailscale home network is so fast it feels like you’re doing something wrong. You’re not. It’s just actually this simple.
Step 1: Create a Tailscale account. Head to tailscale.com, hit “Get Started,” and sign in with Google, GitHub, or Microsoft. That’s your tailnet — your private network.
Step 2: Install Tailscale on every device you want connected. They’ve got apps for Windows, macOS, Linux, iOS, Android, and even Synology NAS, TrueNAS, and Raspberry Pi. On Linux (including Raspberry Pi), it’s a single command:
sudo tailscale up
That’s it. The device shows up in your Tailscale admin console within seconds.
Step 3: Connect from anywhere. Your Tailscale home network is now live. On your phone or laptop, open the Tailscale app, turn it on, and you can now reach your home server by its Tailscale IP — or better yet, by its MagicDNS name like my-homeserver.tailnet-name.ts.net. SSH, RDP, web UIs, Plex — all of it, just works.
What to Run Tailscale On: Hardware That Makes Sense
You need at least one device at home that’s always on — that’s your “always-available” node that acts as the bridge to everything else on your local network. Here are the options that work best.
Raspberry Pi: The classic homelab gateway. Cheap, silent, sips power, runs 24/7 without complaint. It also runs Docker containers like Pi-hole and Portainer alongside your Tailscale home network. The CanaKit Raspberry Pi 5 Starter Kit comes with everything you need to get started — Pi, case, power supply, SD card. Set it up as a Tailscale subnet router and you can reach every device on your home network, not just the Pi itself.
CanaKit Raspberry Pi 5 Starter Kit PRO – Turbine Black (128GB Edition) (4GB RAM)
- Includes Raspberry Pi 5 with 2.4Ghz 64-bit quad-core CPU (4GB RAM)
- Includes 128GB Micro SD Card pre-loaded with 64-bit Raspberry Pi OS, USB MicroSD Card Reader
- CanaKit Turbine Black Case for the Raspberry Pi 5
- CanaKit Low Noise Bearing System Fan
- CanaKit Mega Heat Sink – Black Anodized
$199.97
Mini PC: If you want more horsepower (to run Plex, Jellyfin, Home Assistant, or a local LLM alongside Tailscale), a mini PC is the move. The Beelink EQ12 runs an Intel N100 chip, uses about 6W at idle, and handles Docker containers and Tailscale routing simultaneously without breaking a sweat. It’s become the go-to for homelab folks who want more than a Pi but don’t want a full server.
Beelink EQ12 Mini PC Intel 12th Lake N100(up to 3.4GHz 4C/4T), Mini Computers 16GB DDR4 500GB SSD, Dual 1000Mbps Dual HDMI 4K Displays, Support AV1 deconding/WIFI6/BT5.2/Office/Openwrt
- 👍【N100 Intel 12th Alder Lake Mini PC】mini pc EQ12 N100 equipped with the innovative and Low-Power Intel 12Th Alder Lake Processor CPU up to 3.4Ghz, 4C/4T 6MB cache. Beelink EQ12 mini desktop computer is one of the newest CPU, which means a giant leap in your experience of office working, home theater, and mall advertising. You can use EQ12 Mini PC to do PS, PR C4D, DAW.etc. EQ12 mini pc is also equipped with Dual Ports Lans support Openwrt, HTPC, or Exsi.
- 👍【 4K Triple Screen Display KODI Plex Support AV1 Decoding】Beelinl mini computers EQ12 revolutionarily equips with Intel UHD Graphics Support AV1 Decoding, and innovatively support 4K and Triple screen display. The output of excellent high definition photos and videos by our machine gives you immersive entertainment beyond anything you can imagine.
- 👍【More Ports Designed- Dual 2.5GbE Ports】EQ12 Beelink mini desktop computer has DC Jack*1, USB 3.2*3, RJ 45 2.5GbE*2, HDMI*2, Audio Jack(HP&MIC)*1, Type-C*1. The innovative design of multi interfaces builds up bridge for direct and fluent connection between EQ12 and other machines, which means you can easily integrate different machines and create big change in efficiency.
- 👍【Widely Used & Safety】Beelink Mini PC EQ12 can be used for home entertainment, office, surveillance, billboards, media center, conference room, etc. In addition, the cheap pc also supports Linux operating system(ubuntu), meets server construction, software compilation, or other DIY needs. All of our desktop computers obtained FCC, ROHS, CE certification. We also offer 1-year factory professional support & 7*24 hours online customer service.
GL.iNet Router: This is the sneaky-smart option. GL.iNet routers run OpenWrt and have native Tailscale support baked in. You can run Tailscale directly on the router — which means every device on your home network gets access through the router without needing the Tailscale app installed on each one. The GL.iNet Beryl AX (GL-MT3000) is the portable version, which is also great for travel — run Tailscale on it and your hotel room becomes part of your home network.
Sale
GL.iNet GL-MT3000 (Beryl AX) Portable Travel Router, Pocket Wi-Fi 6 Wireless 2.5G Router, Portable VPN Routers WiFi for Travel, Public Computer Routers, Business, Moblie/RV/Cruise/Plane 1
- 【DUAL BAND AX TRAVEL ROUTER】Products with US, UK, EU Plug; Dual band network with wireless speed 574Mbps (2.4G)+2402Mbps (5G); 2.5G Multi-gigabit WAN port and a 1G gigabit LAN port; USB 3.0 port; Wi-Fi 6 offers more than double the total Wi-Fi speed with the MT3000 VPN Router.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Beryl AX automatically encrypts all network traffic within the connected network. Max. VPN speed of 150 Mbps (OpenVPN); 300 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【OpenWrt 21.02 FIRMWARE】The Beryl AX is a portable wifi box and mini router that runs on OpenWrt 21.02 firmware. It supports more than 5,000 ready-made plug-ins for customization. Simply browse, install, and manage packages with our no-code interface within Beryl AX’s Admin Panel.
- 【PROTECT YOUR NETWORK SECURITY】Our pocket wifi, unlike other vulnerable portable wifi hotspot for travel purposes supports WPA3 protocol–Preventive measures against password brute-force attacks; DNS over HTTPS & DNS over TLS–Protecting domain name system traffic and preventing data eavesdropping from malicious parties; IPv6–Built-in authentication for privacy protection, eliminating the need for network address translation.
- 【VPN CASCADING AT EASE】Surpassing the mediocre performance of most VPN routers for home usage, the Beryl AX is capable of hosting a VPN server and VPN client at the same time within the same device, enabling users to remote access local network resources like Wi-Fi printers or local web servers, and accessing the public internet as a VPN client simultaneously.
$84.14
The Power Move: Subnet Routing
Here’s where Tailscale goes from “neat” to actually transformative. By default, Tailscale only lets you reach devices that have Tailscale installed. But with subnet routing, you can advertise your entire home network — like 192.168.1.0/24 — through a single Tailscale node. Once you do that, you can reach your smart TV, your router’s admin panel, your printer, anything on the local network, from anywhere in the world.
To enable it, run this on your always-on node:
Then approve the subnet route in your Tailscale admin console. Done — your Tailscale home network now covers every device on your LAN, making it the most powerful Tailscale home network config for local access. Every device on your remote connection (phone, work laptop, travel router) can now see every device on your home network. It’s the same effect as being physically plugged into your home router — without opening a single firewall port.
MagicDNS, Exit Nodes, and the Free Features You’ll Actually Use
MagicDNS: Enable this in the Tailscale admin console and your devices get human-readable names. Instead of remembering 100.64.1.15, you just SSH to homeserver or open homeserver:8096 in a browser for Jellyfin. It just resolves automatically across all your Tailscale devices.
Exit Nodes: You can designate one node as an “exit node” — meaning all your internet traffic routes through it when you’re connected. This turns your home connection into a full VPN, useful if you’re on sketchy public WiFi or want to browse from your home IP. On your always-on node:
Then on your phone or laptop, select that device as the exit node in the Tailscale app. Boom — you’re browsing through your home connection from wherever you are.
Tailscale SSH: Turn this on and you can SSH into any Tailscale node without managing SSH keys at all. Tailscale handles auth. Enable it with --ssh flag when running tailscale up, then just ssh hostname from anywhere on your tailnet.
NAS Users: Tailscale on Synology Is Shockingly Easy
If you’ve got a NAS, adding it to your Tailscale home network is one of the best ways to securely access it remotely without exposing it to the open internet. Synology has an official Tailscale package in its Package Center — you literally search for it, install it, sign in, and done. No terminal required.
Once it’s on your Synology as part of your Tailscale home network, you can access your file shares, DSM web UI, Surveillance Station, and any Docker containers running on the NAS from anywhere — all through the encrypted Tailscale tunnel. The Synology DS223j is a solid entry-level two-bay NAS that handles this setup well without straining the processor.
Synology 2-Bay DiskStation DS223j (Diskless) 2-bay DS223j; 1GB DDR4
- Secure private cloud – Enjoy 100% data ownership and multi-platform access from anywhere
- Easy sharing and syncing – Safely access and share files and media from anywhere, and keep clients, colleagues and collaborators on the same page
- Comprehensive data protection – Back up your media library or document repository to a variety of destinations
- 2-year warranty
- Check Synology knowledge center or YouTube channel for help on product setup and additional information
$194.99
The Takeaway
A Tailscale home network is one of those things you can’t imagine going back to life without once you’ve used it. It pairs naturally with a smart home setup so your automations stay accessible wherever you are. No port forwarding. No dynamic DNS. No firewall nightmares. Just a private mesh network that connects all your devices like they’re on the same LAN — whether you’re across town or on another continent. The free tier is genuinely generous, and the setup is fast enough that you can have it running before your coffee’s done.
If you’ve got a Raspberry Pi collecting dust, a mini PC, or a NAS — your Tailscale home network starts here today. Future-you stuck in a hotel with a dead laptop drive will thank you.
Got Tailscale running on an unusual setup — TrueNAS, Proxmox, a router, an old Android phone? Drop it in the comments. The homelab rabbit hole is deep and I want to hear what you’re running.