Same WireGuard mesh. A control plane you can eventually run yourself.
Tailscale popularized the modern mesh VPN — but its coordination server is closed-source and cloud-only, full stop. Here's how meshr compares on pricing, SSH access, and the parts of the stack you can and can't control.
meshr vs Tailscale, feature by feature.
Both are WireGuard-based mesh VPNs. The differences show up in who controls the coordination server, SSH tooling, and pricing.
| Tailscale | meshr | |
|---|---|---|
| Underlying protocol | WireGuard (P2P, DERP relay fallback) | WireGuard (P2P, relay fallback) |
| Control plane | Proprietary, cloud-only — not self-hostable | Self-hosted option on the roadmap |
| Free plan | 6 users, unlimited devices, 50 tagged resources | 5 users, 50 devices, 7-day audit log |
| Entry-level paid plan | Standard, $8/user/mo | Pro, $7/user/mo |
| SSH access | Tailscale SSH — session recording labeled beta | Web SSH + session recording, included |
| Access policy | ACL policy file (tags & grants) | Group-based zero-trust policies |
| Device DNS | MagicDNS + split DNS | Mesh DNS + split DNS |
| NAT traversal fallback | Shared DERP relay (throttled) or self-hosted Peer Relays | Relay fallback included |
| SSO / identity | SSO on all plans, SCIM on Standard+ | SSO via OIDC (SAML soon) |
| Device posture / MDM checks | Standard plan and up | Not yet offered |
| Flow logs / JIT access | Premium plan and up | Built-in audit log |
Feature details reflect Tailscale's public docs and pricing pages as of July 2026. Pricing and features change — verify current specifics on their site before deciding.
Where each one actually wins.
No mesh VPN is best at everything. Here's the tradeoff, without the spin.
Where meshr wins
- A self-hosted control plane is on meshr's roadmap — architecturally, Tailscale's coordination server can never be self-hosted, full stop.
- Web SSH with session recording is included, not a beta flag. Tailscale's own documentation still labels SSH session recording as beta.
- Pro starts at $7/user/mo vs Tailscale Standard at $8/user/mo.
Where Tailscale wins — honestly
- Tailscale's free Personal plan allows unlimited devices for up to 6 users — meshr's free plan caps at 50 devices.
- A much larger install base and years of production hardening.
- Peer Relays (launched Oct 2025) let you run a dedicated self-hosted relay instead of the shared DERP network — meshr doesn't have an equivalent yet.
- JIT access and flow logs on the Premium plan for compliance-heavy teams.
Migrating from Tailscale?
Install the meshr agent alongside Tailscale, verify connectivity and policies side by side, then cut over when you're ready — no rip-and-replace required.
curl -fsSL https://get.meshr.to/install.sh | sudo bash meshr login -t <setup-key> meshr up Common questions.
Is meshr's control plane self-hosted like Headscale?
Not yet — today meshr runs as a managed cloud service, the same as Tailscale. A self-hosted control plane is on the roadmap; the architecture is designed to support it, which isn't true of Tailscale's closed-source coordination server.
Does meshr have an equivalent to Tailscale SSH's session recording?
meshr ships web SSH with session recording included, not gated behind a beta flag. Tailscale's own documentation currently labels SSH session recording as beta.
How does meshr's pricing compare to Tailscale's?
meshr's Pro plan starts at $7/user/month; Tailscale's Standard plan starts at $8/user/month. Tailscale's free Personal plan allows unlimited devices for up to 6 users, while meshr's free plan supports 5 users and 50 devices.
Does meshr support automatic device names like MagicDNS?
Yes — meshr assigns automatic mesh DNS names to every device, plus split DNS, the same general idea as Tailscale's MagicDNS.
What does Tailscale do better than meshr today?
Tailscale's free tier allows unlimited devices, it has a much larger install base, and Peer Relays give you a self-hosted relay alternative to the shared DERP network — something meshr doesn't offer yet. Its Premium plan also adds JIT access and flow logs for larger compliance teams.
Ready to try meshr instead of Tailscale?
Start with a free account. No credit card required. Works with any infrastructure.
# Try meshr in 3 commands
$ curl -fsSL https://get.meshr.to/install.sh | sudo bash
$ meshr login -t <setup-key>
$ meshr up
✓ Connected! IP: 10.0.0.5
✓ DNS: my-server.meshr
✓ SSH: meshr ssh my-server
✓ Tunnel: meshr tunnel http 3000