Tailscale

Company history and funding

Tailscale was founded in 2019 by a team of four former Google engineers: Avery Pennarun, David Crawshaw, David Carney, and Brad Fitzpatrick. The company's name was inspired by a 2013 Google research paper titled 'The Tail at Scale', which explored techniques for managing latency in large-scale distributed systems. The founders aimed to create a networking product that simplified secure connectivity, leveraging their expertise in large-scale systems to build a zero config VPN as a service. The company established its headquarters in Toronto, contributing to the city's growing reputation as a technology hub and providing a base for its Canadian and international operations.

The company's growth has been supported by several major rounds of venture capital funding from prominent Silicon Valley and technology investment firms. In November 2020, Tailscale secured US$12 million in a Series A financing round led by Accel, with participation from seed investors Heavybit and Uncork Capital. This initial funding allowed the company to expand its engineering team and further develop its core VPN platform for a wider range of supported operating systems. The investment reflected strong investor confidence in the team's vision for a modern, easy-to-use networking solution that could compete with complex legacy infrastructure.

Subsequent funding rounds demonstrated accelerating market traction and validation of the company's business model. In May 2022, Tailscale raised a US$100 million Series B round led by CRV and Insight Partners, with existing investors also participating. This larger infusion of capital was used to scale sales, marketing, and customer support operations globally while continuing to add features like Taildrop and Exit Nodes. Most recently, in April 2025, the company secured a US$160 million Series C round, again led by Accel with participation from CRV, Insight Partners, Heavybit, and Uncork Capital. This latest funding round, one of the larger ones for a Canadian software company at the time, positions Tailscale for continued expansion and product development in the competitive secure access market.

Core technology and operation

The Tailscale service is a software-defined mesh virtual private network that establishes secure connections between devices using a combination of open-source software and a proprietary management service. It combines open-source client software with a web-based management service to configure and oversee the network, establishing peer-to-peer or relayed VPN communication with other clients. The underlying protocol for encryption and data transfer is WireGuard, renowned for its simplicity and high performance, which Tailscale extends with its own coordination layer. This architecture allows Tailscale to provide a zero-configuration VPN experience, where users do not need to manually set up complex networking rules or manage encryption keys.

Tailscale employs sophisticated techniques to establish the most efficient connection path between devices on its network. It first attempts to create a direct, peer-to-peer connection using NAT traversal techniques like STUN or by requesting port forwarding via protocols such as UPnP IGD, NAT-PMP, or PCP. If a direct connection cannot be established due to restrictive firewalls or network configurations, the system automatically falls back to using encrypted relay servers provided by the company. These relays use a proprietary protocol called DERP, which stands for Designated Encrypted Relay for Packets, ensuring connectivity is maintained even in challenging network environments where direct links are impossible. The addressing scheme within a Tailscale network is deliberately designed for maximum compatibility with existing user infrastructure. For advanced use cases, the Linux client can be configured to disable source NAT (SNAT), allowing it to route traffic directly to source IPs and act as a gateway for other networks behind itself, enabling more complex routing scenarios without additional network hardware.

Supported platforms and deployment

Tailscale provides client software for a wide array of operating systems and devices, ensuring broad accessibility for users across personal, corporate, and embedded environments. This cross-platform support is a fundamental feature, allowing a heterogeneous mix of devices from different manufacturers and running different software to join a single, unified secure network. The availability on consumer, enterprise, and embedded systems makes it a versatile tool for various networking scenarios, from connecting a developer's laptop to a cloud server to linking an entire corporate fleet of devices and servers. The primary supported client platforms include a comprehensive list of major desktop, mobile, and specialized operating systems that cover most computing devices in use today. The software supports Windows operating systems for personal computers and servers, and macOS for Apple's line of desktop and laptop computers. It also supports iOS and tvOS for Apple's mobile devices and television platform, Linux distributions across servers and desktops, and Android for mobile phones and tablets. The software also provides support for Synology DiskStation Manager and QNAP QTS for network-attached storage devices from those manufacturers.

Beyond standard operating systems, Tailscale offers specialized tools for modern infrastructure deployment common in software development and IT operations. The company provides a Kubernetes operator, which allows administrators to integrate Tailscale networking directly into container orchestration environments for secure service-to-service communication. Official Docker images are also available, enabling the use of Tailscale within containerized applications and facilitating secure connections for microservices. This extensive platform support facilitates the integration of Tailscale into diverse IT environments, from personal projects and small businesses to large-scale corporate infrastructure and cloud-native applications that require reliable and secure connectivity.

Key product features

Tailscale has developed additional features beyond its core VPN service. One feature is Taildrop, which is an encrypted peer-to-peer file sharing service. Taildrop is available to all users on all plans once enabled from the admin console. Another feature is Exit Nodes, which is a node where Tailscale connects to the rest of the internet. Tailscale also started a public beta, a paid add-on, partnering with Mullvad to allow users to exit via Mullvad servers.

One notable feature is Taildrop, an encrypted peer-to-peer file sharing service that has entered a public alpha testing phase. As of the latest information, Taildrop is available to all users on all subscription plans once enabled from the admin console, with no additional cost during its alpha period. Its user-facing functionality is designed to be simple and familiar, operating similarly to Apple's AirDrop on iOS or Quick Share on Android devices, providing a consistent experience across platforms. The service allows for direct file transfers between devices on the same Tailscale network without exposing data to the public internet, leveraging the existing encrypted tunnels for security and privacy during the transfer process.

Another significant feature is the Exit Nodes functionality, which provides a mechanism for internet traffic egress similar in concept to the Tor network. An Exit Node is a device on the Tailscale network through which traffic can be routed to access the broader internet, allowing users to mask their public IP address with that of the exit node. These can be configured on most devices with Tailscale installed, and when activated they act as the decryption point for traffic before it reaches the public internet. Tailscale also started a public beta of a paid add-on, partnering with the privacy-focused VPN provider Mullvad to allow users to exit their internet traffic via Mullvad's global server infrastructure, combining Tailscale's easy access with Mullvad's privacy guarantees for users who require an anonymous browsing option.

Technical architecture and protocols

The technical architecture of Tailscale is a layered system that abstracts away the complexity of traditional VPN setup and management. At its foundation is the WireGuard protocol, a state-of-the-art, open-source VPN protocol that provides the cryptographic隧道 for all data transmission between connected devices. On top of this, Tailscale adds a coordination layer managed by its web-based service, which handles device authentication, key distribution, and network topology discovery for the entire mesh. This separation allows the client software to be simple and focused on connectivity, while the cloud service manages the dynamic aspects of the mesh network and provides a central point for administrative control and monitoring.

Connection establishment follows a deterministic process to optimize for speed and reliability based on the network conditions between any two devices. The client software first attempts to use NAT traversal techniques like STUN to discover its own public-facing address and port mappings, and it may request port forwarding via UPnP IGD, NAT-PMP, or PCP if the local network hardware supports these protocols. The goal is always to create a direct peer-to-peer WireGuard connection, which offers the lowest latency and highest throughput possible between two endpoints. The system's use of the DERP relay protocol as a fallback is a critical component, ensuring that devices can always communicate even when both are behind symmetric NATs or very restrictive firewalls that block all inbound connections that would be required for a direct link. The network's internal addressing and routing are designed for automatic operation without user intervention to maintain the zero config promise. The Linux client's advanced capability to disable SNAT and route traffic directly enables use cases like serving as a secure gateway for an entire remote office subnet, allowing all devices on that subnet to reach the Tailscale network. This combination of effective connection mechanics and thoughtful network design allows Tailscale to deliver on its promise of a zero config service that works reliably in almost any environment a user might encounter.

Market position and significance in Canada

Tailscale operates in the competitive and growing market for business and developer-focused VPN and secure access solutions, often categorized as Zero Trust Network Access (ZTNA). Its primary differentiator is the emphasis on a zero-configuration, mesh-based architecture that simplifies the process of connecting devices across different networks without centralized gateways or complex firewall rules. By building on the open-source WireGuard protocol, Tailscale leverages a modern, audited, and performant cryptographic foundation that has gained wide industry acceptance as a superior alternative to older protocols. This technical choice appeals to security-conscious users and enterprises looking for alternatives to legacy VPN technologies like IPsec or OpenVPN that are often complex to manage and scale across a distributed organization.

Tailscale secured funding of US$12 million in a Series A round in November 2020. This round was led by Accel, with seed investors Heavybit and Uncork Capital participating. In May 2022, the company secured a US$100 million Series B round led by CRV and Insight Partners. In April 2025, the company secured a US$160 million Series C round led by Accel, with participation from CRV, Insight Partners, Heavybit, and Uncork Capital.

Tailscale Inc. is a software company based in Toronto, Ontario. In 2019, Google engineers Avery Pennarun, David Crawshaw, David Carney, and Brad Fitzpatrick founded Tailscale. The company's name was inspired by a 2013 Google research paper, The Tail at Scale. Tailscale develops an open-source software-defined mesh virtual private network and a web-based management service.

Questions about Tailscale

What is Tailscale and what does it do?

Tailscale is a software company that provides a virtual private network (VPN) service. It creates a secure, encrypted network that connects your devices and servers as if they were on the same local network, no matter where they are physically located. The service is designed to be zero-configuration, meaning it automates the complex setup typically associated with traditional VPNs. It is built on the modern WireGuard protocol for high performance and strong security, and it operates as a managed service with a web-based admin console for user control.

Is Tailscale a Canadian company?

Yes, Tailscale Inc. is a Canadian company with its headquarters located in Toronto, Ontario. It was founded in 2019 by a team of four engineers, all of whom previously worked at Google. The company's presence in Toronto adds to the city's growing technology sector and its operations and development efforts are based out of its Canadian headquarters. This makes it a notable example of a globally competitive software-as-a-service company originating in Canada and competing on the international stage.

How much funding has Tailscale raised?

Tailscale has raised significant venture capital funding across three major rounds. In November 2020, it raised a US$12 million Series A round led by Accel with seed investors Heavybit and Uncork Capital. This was followed by a US$100 million Series B round in May 2022, led by CRV and Insight Partners with existing investors participating. Most recently, in April 2025, the company secured a US$160 million Series C round, again led by Accel with participation from CRV, Insight Partners, Heavybit, and Uncork Capital.

What operating systems does Tailscale support?

Tailscale offers client software for a wide range of operating systems and platforms. This includes mainstream desktop and mobile systems like Windows, macOS, Linux, iOS, tvOS, and Android. It also supports popular network-attached storage (NAS) platforms from Synology and QNAP, allowing these devices to be integrated into the secure mesh. For developers and infrastructure teams, Tailscale provides a Kubernetes operator for container orchestration and official Docker images for containerized deployments, covering most modern computing environments used in professional settings.

What is the Taildrop feature?

Taildrop is an encrypted peer-to-peer file sharing service developed by Tailscale that has entered a public alpha testing phase. It is available to users on all subscription plans after being enabled in the admin console, with no extra charge during the alpha. The service functions similarly to AirDrop on Apple devices or Quick Share on Android, allowing for easy file transfers between devices connected to the same Tailscale network. All file transfers are secured within the encrypted Tailscale tunnel and do not traverse the public internet, maintaining privacy and security throughout the file sharing process.

Can Tailscale hide my public IP address like a regular VPN?

Yes, through its Exit Nodes feature. You can configure a device on your Tailscale network, like a home server or cloud instance, to act as an exit node, routing your internet traffic through it to mask your original IP address with the node's IP. Tailscale also offers a paid add-on in public beta that partners with Mullvad VPN, allowing you to exit your traffic through Mullvad's global server network for enhanced privacy and geographic location masking. This provides a similar benefit to commercial VPN services but integrated directly into the Tailscale environment with a single management interface.

Sources and further reading

• Tailscale (Wikipedia)
• We're Building the New Internet | About Tailscale (tailscale.com)

Checked by the Yadude Books desk. Last updated 2026-10-22.