On any Linux device:

Example ACL (allow web server access only):

From there, explore subnet routing, exit nodes, and Tailscale SSH to build the exact private network you need – without a single firewall rule.

"acls": [ "action": "accept", "src": ["autogroup:members"], "dst": ["webserver:80", "webserver:443"] ]

# On server at home curl -fsSL https://tailscale.com/install.sh | sh sudo tailscale up curl -fsSL https://tailscale.com/install.sh | sh sudo tailscale up ssh user@home-server

Tailscale is a Zero Trust VPN (Virtual Private Network) that makes connecting your devices (laptops, servers, phones, cloud instances) as simple as if they were all on the same secure local network. It builds on top of the modern WireGuard protocol, handling key generation, peer discovery, and NAT (Network Address Translation) traversal automatically.