# Tailscale

> Love it. Easy, secure access from my machines to private AWS resources.

- Verdict: My default
- Vendor: Tailscale
- Layer: [Networking and hosting](https://cloudlesslabs.com/stack/layers/network.md). Job: Private network access
- Last reviewed: 18 October 2026, by Nicolas Dao (Cloudless Labs, Sydney)
- Web page: https://cloudlesslabs.com/stack/tailscale/. The whole stack in one file: https://cloudlesslabs.com/stack/brief.md

Much better than AWS's own options (Client VPN, bastions), which are too expensive and too complicated.

## Use it when

- Developers and tools need to reach private databases and services in a VPC.

## Provisioning

Official Pulumi package · Official Terraform provider

@pulumi/tailscale: ACLs, auth keys, devices, DNS.

## Where it fits

- [Private access and exposing a box](https://cloudlesslabs.com/stack/use-cases/private-access.md): pick 1. Your machines into the VPC.

## Related

- [Networking and hosting](https://cloudlesslabs.com/stack/layers/network.md): every tool in this layer, with its verdict
- [The whole stack in one file](https://cloudlesslabs.com/stack/brief.md): every use case and tool, for questions that span many
- [Map of every Markdown file on cloudlesslabs.com, with what each one answers](https://ask.cloudlesslabs.com)