SSH into Raspberry Pi from Outside Home Network Using Tailscale

Learn how you can use Tailscale to secure connect to your Raspberry Pi from outside your home network.
Warp Terminal

Earlier, I shared how you can use Cloudflare Tunnels to access Raspberry Pi outside your home network.

A few readers suggested using Tailscale. And indeed, this is a handy tool if your aim is to ssh into your Raspberry Pi securely from outside your home network.

In this article, I'll be covering how you can use Tailscale VPN to remotely connect to your Raspberry Pi without the hassle of complicated network setups.

What is Tailscale?

Tailscale is a zero-config VPN built on the WireGuard protocol, designed to securely connect devices across different networks as if they were on the same local network.

It simplifies private networking by establishing a mesh VPN that routes traffic between your devices, no matter where they are.

Tailscale

Tailscale is available for multiple platforms, including Linux, macOS, Windows, Android, and embedded devices like the Raspberry Pi, making it a versatile solution for remote access.

How Tailscale Works

At the heart of Tailscale is WireGuard, a fast and modern VPN protocol.

Tailscale uses this protocol to create encrypted connections between your devices, while managing all the networking complexities behind the scenes.

Its key mechanics include:

  • Mesh Networking: Devices in your Tailscale network (or "tailnet") connect directly to each other where possible, creating a mesh of encrypted connections.
  • End-to-End Encryption: All traffic is encrypted from one device to another, ensuring privacy and security.
  • NAT Traversal: Tailscale automatically handles NAT traversal and firewall configurations, so you don’t need to worry about setting up port forwarding or exposing services.
  • Auto-Routing: Once your devices are connected to the tailnet, Tailscale automatically routes traffic between them as needed.

This makes it an excellent option for remotely accessing your Raspberry Pi or any other device, eliminating the hassle of configuring VPNs, firewalls, or DNS settings.

Installing Tailscale on Raspberry Pi

Tailscale can be installed easily on any Linux-based system, including the Raspberry Pi. Here’s how to set it up:

Update your system:

sudo apt update && sudo apt upgrade -y

Install Tailscale:

curl -fsSL https://tailscale.com/install.sh | sh

Authenticate and connect to Tailscale:

sudo tailscale up

This command will generate a URL. Open this URL in your browser to log in with your Tailscale account. Once authenticated, your Raspberry Pi will be connected to your tailnet.

Access Your Raspberry Pi: Once your Pi is part of the tailnet, you can access it remotely using its Tailscale IP address.

ssh pi@<tailscale-ip>
SSH into Raspberry Pi

Setting Up Your Tailscale Network (Tailnet)

Once you’ve created your Tailscale account, you’ll need to set up your tailnet and connect devices to it.

Tailnet Creation: The good news is that Tailscale automatically creates a tailnet for you when you log in.

There's no need for manual network setup just install Tailscale on your devices and they’ll join the same tailnet.

Tailnet IP Addresses: Every device that joins your tailnet gets its own private, secure IP address.

These IP addresses are assigned automatically by Tailscale and can be used to remotely access your devices.

Managing Devices: Once a device joins your tailnet, you can view and manage it from the Tailscale web dashboard.

From here, you can see the connection status, IP address, and name of each device. You can also remove devices or disable connections if needed.

With your tailnet set up, you’re ready to access your Raspberry Pi from anywhere in the world, securely and without any complicated network configurations.

Pricing

Tailscale offers a straightforward pricing structure, starting with a Free Tier that supports up to 100 devices and includes all the key features needed for secure remote access—no credit card required.

For users needing more, the Personal Pro plan is $5 per user per month, with unlimited devices and 1 subnet router, while the Business Plan at $10 per user per month adds advanced features like ACLs and more subnet routers.

The Enterprise Plan offers custom solutions for larger networks.

For most personal projects, the Free Tier provides everything you need to get started easily.

Conclusion

Tailscale offers a simple solution for those needing simple, secure remote access to their Raspberry Pi or any other device.

By leveraging WireGuard for fast and encrypted connections, and simplifying the complexities of VPN setup, Tailscale allows you to focus more on your projects and less on network configuration.

The ease of installation, makes it an excellent choice for beginners, developers, and home automation enthusiasts alike.

If you have any suggestions for other apps or services you’d like us to cover, or if you want to share what systems you use for remote access, feel free to comment below! We'd love to hear your thoughts and experiences.

About the author
Abhishek Kumar

Abhishek Kumar

I'm definitely not a nerd, perhaps a geek who likes to tinker around with whatever tech I get my hands on. Figuring things out on my own gives me joy. BTW, I don't use Arch.

Become a Better Linux User

With the FOSS Weekly Newsletter, you learn useful Linux tips, discover applications, explore new distros and stay updated with the latest from Linux world

itsfoss happy penguin

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to It's FOSS.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.