Tailscale
Mesh VPN whose coordination server is hosted by Tailscale even though the tunnels are yours.
2 self-hosted replacements in this index, ranked by GitHub stars in the dataset.
Replacements
Pangolin
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels.
23,277 stars Active
28 Oct 2026 1.25.3
Firezone
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
9,152 stars Active
31 Oct 2026 headless-client-1.5.15