Overview
"Headscale is an open-source, self-hosted implementation of the Tailscale control server that gives you full ownership of your private mesh VPN infrastructure. Paired with Headplane, a modern web-based administration interface, this deployment lets developers, DevOps teams, and SaaS platforms build secure, WireGuard-based networks connecting servers, containers, and remote devices across any cloud or on-premises environment, without depending on a third-party coordination service.
Headscale Step by step Installation Guide: https://meetrix.io/blogs/headscale-developer-guide/ For custom projects of your choice with personalized support, contact us at https://meetrix.io/contact-us
Self-Hosted Control Plane: Run your own private Tailscale-compatible coordination server with complete control over data residency, identity providers, and network policies.
Headplane Admin Dashboard: Manage users, nodes, access control lists, and pre-authentication keys through an intuitive browser-based web UI.
WireGuard-Based Mesh Networking: Build encrypted, peer-to-peer connections between servers, containers, and devices without routing traffic through third-party infrastructure.
Flexible Identity Provider Support: Authenticate users through OpenID Connect or built-in authentication, integrating with existing identity systems.
ACL and Access Policy Management: Define granular network access rules to control which nodes and users can communicate with each other.
Multi-Network DNS and Routing: Configure MagicDNS, subnet routes, and exit nodes to extend secure connectivity to entire private networks.
Version: Headscale 0.29.2 with Headplane 0.7.0 Operating System: Ubuntu 24.04
Headscale with Headplane provides a flexible, self-hosted mesh VPN platform for startups, enterprises, remote teams, and platform engineers who need secure connectivity without vendor lock-in. Deploy a reliable coordination server with encrypted networking and simplified administration. Headscale Step by step Installation Guide: https://meetrix.io/blogs/headscale-developer-guide/ "
Highlights
- Self-Hosted Control Plane: Run your own private mesh VPN coordination server with full control over data residency, identity providers, and network policies.
- Headplane Web UI: Manage users, nodes, access control lists, and pre-authentication keys through an intuitive browser-based admin dashboard.
- WireGuard-Based Mesh Networking: Build secure, encrypted peer-to-peer connections across servers, containers, and devices without third-party coordination servers.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
t2.micro | $0.001 |
c5a.xlarge | $0.029 |
c6a.xlarge | $0.029 |
t3a.medium | $0.024 |
m5a.large | $0.024 |
m7a.large | $0.024 |
t3.medium | $0.024 |
t2.medium | $0.024 |
m6a.large | $0.024 |
m4.xlarge | $0.029 |
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Headscale Deployment with Headplane Web UI
This deployment launches Headscale within a secure virtual infrastructure, providing a reliable coordination server for private mesh VPN networking. The AMI is preinstalled and configured with Headplane, allowing administrators to manage users, nodes, access control lists, and pre-authentication keys immediately after launch through a web browser. This architecture is designed for secure WireGuard-based connectivity, centralized administration, and simplified deployment workflows across cloud and on-premises environments.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
First Release
Additional details
Usage instructions
"Click the ""Continue to Subscribe"" button. After subscribing, you will need to accept the terms and conditions. Click on ""Accept Terms"" to proceed. Please wait for a few minutes while the processing takes place. Once it's completed, click on ""Continue to Configuration"".
IAM Role is set up and configured with the necessary permissions to assume the role for the Headscale service. The IAM Policy is created and responsible for access Route53 and create Letsencrypt SSL certificates and backing up data to the S3 bucket.
Access the application via a browser at http://<your domain name> or http://<Public IPv4 address>. Product will try to create SSL certificate when its deploying, if domain hosted on route53. If the automatic SSL creation unsuccessful then you have to point domain name into server ip, ssh into server and run /root/certificate_generate_standalone.sh. Admin email using for SSL generation."
Resources
Vendor resources
Support
Vendor support
Please contact us through aws@meetrix.io . Please allow up to 12 hours for our support team to address your request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.