Headscale
Headscale is a self-hosted, open-source implementation of the Tailscale control server. With complete control over your VPN network, Headscale provides a secure alternative for organizations of any size.
Trusted by leading companies
What is Headscale?
Headscale is a self-hosted, open-source implementation of the Tailscale control server. With complete control over your VPN network, Headscale provides a secure alternative for organizations of any size.
As a self-hosted solution, Headscale implements the same features as Tailscale but without external dependencies. The solution supports modern VPN technologies, Access Control Lists (ACLs), and Single Sign-On (SSO) integration.
Ready for Headscale?
We install, host and operate Headscale for your company - either on our secure, GDPR-compliant infrastructure in Germany or other locations, as well as on-premise in your own environment.
With 24/7 monitoring, enterprise support, backups and professional maintenance, we ensure maximum availability and reliable operation of your Headscale instance.
Fully Self-Hosted
Run your own Tailscale control server with complete control over your network infrastructure.
Access Control Lists (ACLs)
Granular network access controls with tag-based authorization and group management.
Single Sign-On (SSO)
OIDC integration with Keycloak, Active Directory, Google, Azure AD, and other identity providers.
Exit Nodes
Route all internet traffic through designated exit nodes for secure external connections.
MagicDNS & Custom DNS
Automatic DNS resolution for VPN hosts and custom DNS records for internal services.
API Management
Complete REST API for node management, ACL administration, and network configuration.
Headscale in Action
Experience Headscale in Action
See how simple and efficient Headscale works in practice. From installation to productive use.
Headscale Installation & Einrichtung
Professional installation on your infrastructure – on-premise, cloud or hybrid
On-Premise
In your data center
- Installation on bare-metal, VM or Docker
- Optimal performance configuration
- Integration with existing Active Directory/LDAP
- SSL certificate & reverse proxy
- Backup strategy & monitoring
- Security hardening following best practices
- Documentation & training
Cloud Installation
AWS, Azure, Hetzner & more
- Installation on AWS, Azure, GCP, Hetzner
- Terraform/IaC setup (optional)
- Kubernetes or Docker Compose
- Auto-scaling configuration
- Load balancer & CDN integration
- CloudWatch/monitoring setup
- Cost optimization & best practices
Enterprise Setup
High-availability setup with comprehensive security and compliance features
- High-availability cluster setup
- VPN access (e.g. WireGuard, NetBird, Tailscale)
- SSO integration (e.g. Keycloak, Authentik, Azure AD)
- Multi-factor authentication (MFA)
- Audit logging & compliance
- Disaster recovery plan
- Custom security policies
- Dedicated contact person
Security & Secure Access
Secure access and access control for your installation
VPN Access
WireGuard, NetBird or Tailscale
SSO Integration
Keycloak, Authentik, Azure AD
Multi-Factor Auth
TOTP, WebAuthn, YubiKey
Firewall & Hardening
Fail2Ban, Rate Limiting, IP Whitelisting
Secure Access via VPN
We set up secure VPN access to your installation – ideal for remote work and external employees.
- Zero-Trust Network Access (ZTNA)
- Encrypted connections
- Easy client setup for all devices
- Centralized access management
Supported VPN Solutions:
What's Included in the Service
Full-service installation with no hidden costs
Enterprise Managed Hosting
Enterprise Grade
Open source enterprise-ready for productive workloads - we run your applications with highest security standards and enterprise support
Why Enterprise Managed Hosting?
Open source software for business-critical processes requires professional maintenance, continuous updates, and enterprise-grade support. With our Headscale Enterprise Managed Hosting, you get the necessary infrastructure and support to reliably operate open source in production environments. Backups, SLAs, telephone support, and personal contact - so you can focus on your core business.
Installation on Your Infrastructure
Looking for a custom solution?
We also offer customized Headscale Enterprise solutions for your specific requirements. Contact us for an individual quote.
Interested in Headscale?
Good choice – we'll help you get started or with operations.
Manage Your Stack in the Customer Portal
As a Managed Service customer at WZ-IT, you have access to our exclusive portal: Monitor your infrastructure in real-time, schedule maintenance, request quotes, and get direct support – all in one central location.
- Real-time infrastructure status
- Reschedule maintenance windows yourself
- View complete access logs
- Direct support without detours
Matching Solutions for Your Project
Complementary Technologies
These solutions are often used together with Headscale
Similar Technologies
These solutions offer similar functionalities and can be evaluated together
Alternative Solutions
These solutions are direct alternatives with similar use cases
Industry-leading companies rely on us
What do our customers say?
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea – we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Trusted by leading companies
Timo Wevelsiep & Robin Zins
CEOs of WZ-IT