Public IPv6 for when private mesh isn't enough.
Tailscale is brilliant for private mesh — your devices talk to each other and nobody else. wayangi is the inverse: each device gets a dedicated public IPv6 anyone on the internet can connect to. Run alongside Tailscale, or use wayangi's free mesh tier instead.
wayangi vs Tailscale at a glance
| What you get | Tailscale | wayangi |
|---|---|---|
| Public IPv6 reachable from the internet | — no (mesh only; Funnel exposes HTTPS on *.ts.net only) | Yes — dedicated /128 per device, any DNS |
| Private mesh between your own devices | Yes — magic DNS, MagicDNS, ACLs | Yes — free tier, up to 3 of your devices |
| Raw TCP/UDP from public internet | Funnel: HTTPS only | Any protocol — TCP, UDP, ICMP, QUIC |
| Data plane | WireGuard (P2P with DERP fallback) | WireGuard (hub-and-spoke) |
| Bring your own domain | Funnel uses *.ts.net | Any DNS — point an AAAA record |
| Account model | Tailscale account + identity provider | Google sign-in to wayangi.dalang.io |
| Bandwidth cap on free | Funnel: 1 GB/mo free | No cap on paid tiers |
| Free tier shape | 100 devices in a private mesh | 3 devices in a private mesh (no public IPv6) |
| Self-host control plane | Headscale (third-party, unofficial) | No — managed in Singapore by DALANG PTE. LTD. |
When to pick wayangi over Tailscale
- You want a publicly reachable IP — not just a magic DNS name inside your tailnet.
- You want raw TCP/UDP exposed — game server, IRC, custom protocol — not just HTTPS like Tailscale Funnel.
- You don't want a 1 GB/mo bandwidth cap on public exposure.
- You want to point your own domain at the IP — no
*.ts.netsuffix. - You self-host services from CGNAT and the consumer needs to find your device without installing anything.
When Tailscale is the better pick
- Your devices only need to talk to each other, not the outside world.
- You need ACLs / SSO / magic DNS across a large device fleet (Tailscale's strength).
- You want peer-to-peer routes when NAT traversal succeeds (Tailscale finds direct paths; wayangi always hubs).
- You're on the Tailscale free tier and it fits — no reason to pay anyone.
Running wayangi alongside Tailscale
They use different interfaces (Tailscale's tailscale0 vs wayangi's wayangi0 / utun) and don't conflict. Use Tailscale for your internal traffic, wayangi for any device that needs to be reachable from the open internet.
- Tailscale handles your private mesh and ACLs.
- wayangi binds a public IPv6 on the same device for inbound from outside the tailnet.
- No overlap on ports or routing tables — wayangi only sets up routes for its own /128 (or /124) prefix.
Frequently asked questions
Is wayangi a Tailscale alternative?
Partially. Tailscale is a private mesh VPN — your devices reach each other through magic DNS but the outside world can't reach them. wayangi is the opposite: each device gets a dedicated PUBLIC IPv6 that anyone on the internet can connect to. If you need a private mesh, Tailscale is great. If you need to expose a service to the public, wayangi is the simpler answer.
Can I use wayangi as a mesh VPN like Tailscale?
Yes — wayangi peers can talk to each other through the hub tunnel using the internal mesh addresses (10.66.0.0/16 IPv4 + 2001:df6:d2c0:1400:ffff::/64 IPv6 link addresses). The free tier is exactly this — a mesh between up to 3 of your own devices, no public IPv6.
How does wayangi compare to Tailscale Funnel (public exposure)?
Tailscale Funnel exposes your tailnet device on a *.ts.net subdomain, HTTPS only, with a 1 GB/month bandwidth cap on the free tier and HTTP-only protocol support. wayangi gives you a raw IPv6 address — any protocol, no bandwidth cap on paid tiers, you bring your own domain.
Does wayangi use WireGuard like Tailscale?
Yes — wayangi's data plane is WireGuard. The hub is a standard WireGuard endpoint on UDP/443; the agent uses the embedded wireguard-go library so no kernel module is required on the client.
Can I run wayangi and Tailscale side-by-side?
Yes. They use different interfaces (utun, wg, etc.) and the agent's only network change is to add one tunnel — won't interfere with a Tailscale install.
Is wayangi cheaper than Tailscale?
wayangi is $5/month per device for a public IPv6. Tailscale's personal tier is free for up to 3 users / 100 devices in a private mesh; Funnel adds public exposure but only for HTTP. The pricing isn't directly comparable — they solve different problems.
Tailscale + wayangi covers both sides.
Private mesh through Tailscale. Public IPv6 through wayangi. $5/month per public device.
Sign in with Google →