Sécuriser les accès et connecter les équipes.

Headscale

Self-host your Tailscale control server — full mesh VPN under your control, no cloud dependency.

Headscale is an open-source, self-hosted implementation of the Tailscale control server. Where Tailscale's free tier limits you to 3 users and stores your network map in the cloud, Headscale runs the coordination server on your own VPS — your keys, your ACLs, your logs. Clients are standard Tailscale apps for every platform (Linux, macOS, Windows, iOS, Android), so your team needs zero new software.

Under the hood, every connection is a direct WireGuard tunnel. Headscale only handles key exchange and ACL distribution — once peers discover each other, traffic flows peer-to-peer with WireGuard's minimal footprint. The Go binary idles under 50 MB RAM. BSD-3-Clause licensed, ~41 k GitHub stars.

Fonctionnalités clés

Full Tailscale-compatible control plane: use the official Tailscale client on every platform — no custom fork required.

Unlimited users and devices: no 3-user cloud limit, no per-seat cost, your network scales with your team.

WireGuard peer-to-peer tunnels: Headscale only coordinates key exchange; actual traffic is direct WireGuard, not proxied.

Magic DNS: resolve every node in your mesh by hostname (machine.yourtailnet) without touching your public DNS.

ACL-based access control: define which users and devices can reach which services using the same HuJSON policy format as Tailscale.

DERP relay support: configure your own DERP relay servers or use Tailscale's public DERP map for NAT traversal fallback.

REST + CLI management: create namespaces, generate auth keys and manage peers via the headscale CLI or the HTTP REST API.

Under 50 MB RAM at idle — run it on any VPS alongside your existing workloads.

Solutions complémentaires

Réseau & VPN

WireGuard Server

VPN moderne, performant et minimal. Connexions sécurisées pour vos équipes et vos infrastructures avec une latence proche de zéro.

Cybersecurity & Bastion

Authelia

Open-source authentication and authorization gateway — add MFA, SSO and fine-grained access control in front of any app without touching its code.

Monitoring & Observabilité

Beszel

Lightweight multi-server monitoring hub. Real-time CPU, RAM, disk and Docker stats across all your VPS instances — single PocketBase dashboard, under 50 MB RAM.

Sécuriser les accès et connecter les équipes.

Activez Headscale sur votre infrastructure.

VPS Cloud dédié — IPv4 incluse, datacenter européen, support inclus. Vos données ne quittent jamais votre serveur.

Besoin d'aide ?

Parcourez notre centre d'aide et notre FAQ, ou écrivez à notre équipe — support en anglais, français et arabe.

ou nous écrire