Networking
Tailscale Exit Node Hosting
Connect your devices through a private userspace exit node. Supports Tailscale or your own Headscale server. Your network administrator must approve exit-node access. Deploy it in one click on Caliber Node — no compose file, no server to prepare, HTTPS working the moment it boots.
From $3.00/mo on the Micro subscription
$5.00 free credit when you sign up — your first month of Tailscale Exit Node, free
- One click
- Deploys in
- 768 MB
- Memory needed
- Not required
- Database
- $3.00/mo
- From
What you get
Tailscale Exit Node runs on a subscription — a pool of CPU, memory and disk that you own. Deploying it takes one click, and the same pool will run your other apps at no extra charge.
A hostname with HTTPS, immediately
Your app is reachable the moment it finishes deploying, on a certificate we issue and renew. Point your own domain at it whenever you like.
Nothing exposed but the app
Only Tailscale Exit Node itself gets a public port. Anything it depends on stays on a private network unreachable from the internet.
A shell and SFTP
A real shell in the container and SFTP for its files. This is not a black box — if you want to get in and look, you can.
Updates you control
We check nightly for a new image and tell you when one lands. Applying it is your decision, per app, and a failed update rolls back to the exact image it replaced.
A free snapshot
One full archive of Tailscale Exit Node included, restorable in a click. Keep more with the snapshots add-on.
Your data, exportable
SFTP access to everything the app stores. Nothing here is locked in.
What actually runs
No mystery images. Tailscale Exit Node deploys one container, and these are exactly the ones:
python@sha256:7c61056e61ac89e852de05f3dc6fa51a6dd2181797bceed46aa725dd7cb2cd3bweb
Running Tailscale Exit Node yourself vs. running it here
Tailscale Exit Node is free software and you can absolutely run it yourself — we would rather tell you that than pretend otherwise. What you are paying for here is the part around it.
On your own server
- You write the compose file and keep it working
- You configure a reverse proxy and renew certificates
- You watch for new releases and apply them
- You own the backups, and finding out they were broken
On Caliber Node
- One click, and it is running on HTTPS
- Certificates issued and renewed for you
- Update checks nightly, applied when you say so
- A free snapshot, restorable in a click
Questions about Tailscale Exit Node hosting
- Can I try Tailscale Exit Node for free?
- Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan Tailscale Exit Node needs, that covers your first month.
- How do I install Tailscale Exit Node?
- Pick Tailscale Exit Node from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure. It comes up on a hostname with HTTPS already working.
- What does hosting Tailscale Exit Node cost?
- Tailscale Exit Node needs at least 768 MB memory, so the Micro subscription at $3.00/mo is the smallest that fits it. That size is a close fit for Tailscale Exit Node on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.
- Do I get access to the Tailscale Exit Node files and database?
- Yes. Every app has a browser shell into its container, SFTP for its files. Your data is yours and you can take it out whenever you want.
- Are updates to Tailscale Exit Node automatic?
- Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app.
- Can I use my own domain for Tailscale Exit Node?
- Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.
- Can I back Tailscale Exit Node up?
- Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.
More networking apps
Technitium DNS Server hosting
Run an authoritative DNS server with a full web console and dedicated TCP and UDP listeners on port 53.
Eclipse Mosquitto hosting
Run a private MQTT broker with generated credentials and an encrypted dedicated IPv4 listener for devices and automations.
UniFi Network Application hosting
Manage your UniFi access points and networks. Includes a private MongoDB database. Requires a dedicated IP and manual remote device adoption.
Headscale + Headplane hosting
Run a self-hosted Tailscale coordination server with the Headplane administration interface. Embedded traffic relaying is disabled.
Pangolin hosting
Publish private web applications through authenticated reverse-proxy tunnels. Requires a dedicated IPv4 address and your own domain for resource hostnames.
Ergo IRC hosting
Private IRC server with accounts, channel registration and an encrypted dedicated listener.
Deploy Tailscale Exit Node in a click
Tailscale Exit Node, running on resources you own, with HTTPS and a free snapshot included.