FAQ

FAQ

Can I run Tailscale on an ESP32? This project runs a community Tailscale-compatible client on an ESP32-S3 with 16 MB flash and 8 MB octal PSRAM (N16R8). It handles selected gateway and recovery jobs without a Linux server. It is not the official Tailscale client and does not support every ESP32.

Is this an official Tailscale client? No. It is community firmware built on the MicroLink stack, compatible with Tailscale and Headscale coordination servers, and not affiliated with Tailscale Inc.

Can IoT devices that cannot install a VPN client use the tailnet? Yes, for supported TCP/UDP services: a LAN device connects to an ESP32 listen port (Service Gateway), or a Wi-Fi device joins the ESP32's own access point (Roles Overview). These are different paths.

Service Gateway or subnet router? The Service Gateway lets LAN devices reach one specific tailnet service (LAN → Tailnet). A subnet router lets tailnet clients reach LAN devices (Tailnet → LAN). You can use both.

Does the LAN client need any software? No. It connects to the ESP32's LAN address and listen port like any server.

Does it work with Headscale? Yes, 0.26 or newer, with a pre-auth key. HTTPS needs a certificate from a public CA. See Headscale.

How fast is it? A microcontroller doing userspace WireGuard on a shared 2.4 GHz radio. Upstream measured roughly 0.3–1.4 Mbit/s through the tunnel. Use it for control, telemetry, dashboards and SSH — not video or bulk transfers.

Is the source filter enough security? It limits which addresses can use a rule, but an address is not an identity. Restrict rules to single devices, keep the peer's ACL tight and set an admin password. See Security Model.

Can it turn on my NAS? It can send Wake-on-LAN if the NAS supports it and has standby power, then check a port. It cannot hard-reset a frozen machine or provide KVM/BIOS access.

How do I find the gateway after setup? Use the link on the last setup page: the address received during the Wi-Fi test or http://esp32-tailnet-xxxx.local/ (the code of its setup Wi-Fi).

Which boards are supported? ESP32-S3 with 16 MB flash and 8 MB octal PSRAM (N16R8). W5500 Ethernet is experimental and only in a separate image. See Hardware.

Does it send telemetry? No usage reports or crash uploads. GitHub update checks happen only when you enable them or press a button.

Do I need MQTT or Home Assistant? No. Every integration is optional.

Is tailnet lock supported? No. The device cannot sign its own node key: disable tailnet lock or pre-authorize the node.

Which languages does the interface support? English, Italian, Spanish and Simplified Chinese in the Wi-Fi image. The first-boot wizard and the experimental W5500 image are English only.