{"id":101348,"date":"2021-09-20T16:22:35","date_gmt":"2021-09-20T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale"},"modified":"2021-09-20T16:22:35","modified_gmt":"2021-09-20T14:22:36","slug":"proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","title":{"rendered":"The Headscale project is developing an open server for the distributed VPN network Tailscale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

The Headscale project develops an open-source implementation of the server component of the Tailscale VPN network, allowing the creation of Tailscale-like VPN networks on one's own infrastructure without relying on third-party services. The Headscale code is written in Go and distributed under the BSD license. The project is developed by Juan Font Alonso from the European Space Agency. <\/p>\n

Tailscale enables the integration of any number of geographically dispersed hosts into a single network, designed in a mesh network structure, where each node interacts with other nodes directly (P2P) or through adjacent nodes, without traffic passing through centralized external servers. VPN<\/a>-provider. It supports access and route management based on ACLs. To establish communication channels in the presence of Network Address Translators (NAT), it provides support for STUN, ICE, and DERP mechanisms (similar to TURN but based on HTTPS). In the event of a communication block between specific nodes, the network can reconfigure routing to direct traffic through other nodes.

\"The<\/center> <\/p>\n

Tailscale differs from the Nebula project, also designed for creating distributed VPN networks with mesh routing, by using the Wireguard protocol for data transfer between nodes, whereas Nebula utilizes technologies from the Tinc project, which employs the AES-256-GCM algorithm for packet encryption (Wireguard uses the ChaCha20 cipher, which demonstrates higher throughput and responsiveness in tests). <\/p>\n

Another similar project is also being developed \u2014 Innernet, which uses the Wireguard protocol for data exchange between nodes. Unlike Tailscale and Nebula, Innernet employs a different access control system that is not based on ACL with tags assigned to individual nodes, but rather on subnet segregation and the allocation of different ranges. (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community.<\/a>, similar to regular internet networks. Additionally, instead of the Go language, Innernet uses Rust. Three days ago, Innernet 1.5 was released with improved NAT traversal support. There is also a project called Netmaker that allows connecting networks with different topologies using Wireguard, but its code is distributed under the SSPL (Server Side Public License), which is not open due to its discriminatory requirements. <\/p>\n

Tailscale operates using a Freemium model, allowing free use for individuals and paid access for businesses and teams. The client components of Tailscale, except for graphical applications for Windows and macOS, are developed as open projects under the BSD license. The server software running on Tailscale's side, which facilitates authentication when connecting new clients, coordinates key management, and organizes communication between nodes, is proprietary. The Headscale project addresses this shortcoming by offering an independent open implementation of the server components of Tailscale.

\"The<\/center> <\/p>\n

Headscale takes on the functions of exchanging node public keys, as well as performing IP address assignments and distributing routing tables between nodes. Currently, Headscale implements all core functionalities of a management server, except for supporting MagicDNS and Smart DNS. Specifically, it supports features such as node registration (including via web), adapting the network for adding or removing nodes, subnet segmentation using namespaces (one VPN network can be created for multiple users), enabling node access to subnets across different namespaces, routing management (including assigning exit nodes to access the external world), access segmentation through ACLs, and operating a DNS service.
\n
Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041a\u043e\u0434 Headscale \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0425\u0443\u0430\u043d \u0424\u043e\u043d\u0442 \u0410\u043b\u043e\u043d\u0441\u043e (Juan Font) \u0438\u0437 \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430. Tailscale \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043e\u0434\u043d\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47The Headscale project develops an open server for the distributed Tailscale VPN network | ProHoster","description":"The Headscale project develops an open implementation of the server component of the Tailscale VPN network, allowing the creation of Tailscale-like VPN networks using one's own resources without relying on third-party services.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 VPN-\u0441\u0435\u0442\u0438 Tailscale | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-20T14:22:36+00:00","article:modified_time":"2021-09-20T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-20 14:23:05","updated":"2026-02-08 20:40:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=101348"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101348\/revisions"}],"predecessor-version":[{"id":158033,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/101348\/revisions\/158033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/101349"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=101348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=101348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=101348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}