Tailscale in Practice
From your first account to production troubleshooting - the English-language guide for home users and self-hosters.
Tailscale connects your home network, servers, NAS devices, and mobile devices into a single mesh VPN - no port forwarding, no classic VPN gateways, no DynDNS. This book guides you from your first account to a production tailnet with subnet routers, exit nodes, MagicDNS, ACLs, and zero-trust.
What makes this book different
The official Tailscale documentation is an excellent reference for which commands exist. This book is a narrative learning path for how you think when you build, operate, and debug a Tailscale network.
12 chapters, one path
Instead of 30 scattered documentation pages, this book leads you linearly from account setup to troubleshooting - you read it like a novel and end up with a working tailnet.
Architecture, not just commands
You understand why Tailscale works - WireGuard protocol, hole punching, MagicDNS resolution, mesh vs. hub-and-spoke - and can solve problems that aren't even covered in the docs.
Fritz!Box, smartphone, home server
You don't need a Linux server or Kubernetes. The instructions work on a Raspberry Pi behind a Fritz!Box 7590, with a smartphone and Windows laptop.
Contents
- 1Classical VPN architectures
- 2WireGuard as data plane
- 3Account & identity provider
- 4Your first network
- 5SSH via Tailscale IP
- 6NAT, CGNAT & hole punching
- 7Subnet routers
- 8Exit nodes
- 9Headless installation
- 10Zero-trust model
- 11Funnel & Serve
- 12Troubleshooting
Headscale in Practice
The practical companion guide: how to move control of your Tailscale network to your own server with Headscale. 9 chapters, 53 pages, as a Kindle e-book for EUR 2.99.