Tailscale — OpenClaw Glossary
A zero-config VPN (Virtual Private Network) based on WireGuard. It creates a secure, private network between all your devices, no matter where they are physically located.
On this page
Tailscale ek private network app hai. Jab aap isko apne VPS aur laptop par install karte ho, toh dono devices ek private internet mein connect ho jate hain. Aap directly ek secure IP se apne OpenClaw dashboard ko access kar sakte ho, bina kisi port ko public kiye.
What is Tailscale?
Tailscale is a mesh VPN service that makes it incredibly easy to connect your devices together securely. It uses the WireGuard protocol under the hood.
When you install Tailscale on your laptop and your VPS, they join your private “Tailnet.” Tailscale assigns each device a special private IP address (usually starting with 100.). Devices on the Tailnet can communicate with each other as if they were on the same physical local network, even if they are on different continents.
Why it matters for OpenClaw
Accessing the OpenClaw dashboard safely requires keeping port 18789 hidden from the public internet. While an SSH Tunnel works great, you have to run a terminal command every time you want to open the dashboard.
Tailscale offers a more seamless experience. If you configure OpenClaw to listen on its Tailscale IP (or use Tailscale’s magic routing), you can simply type http://your-vps-name:18789 into your laptop’s browser. The traffic travels securely over the encrypted Tailnet. To the outside world, the port remains completely invisible.
Common mistake
Binding to 0.0.0.0 thinking Tailscale will protect you.
Some users install Tailscale, but then configure their Gateway with OPENCLAW_HOST=0.0.0.0 and run sudo ufw allow 18789. This defeats the entire purpose of Tailscale. 0.0.0.0 listens on all interfaces, including the public internet one.
Fix: If you are using Tailscale, configure your OpenClaw Gateway to bind only to the Tailscale IP (e.g., OPENCLAW_HOST=100.x.x.x), or keep it on 127.0.0.1 and use Tailscale’s feature called “Tailscale Serve.” Never open port 18789 in your UFW firewall.
Related guides
ClawReady.in is an independent educational resource and setup service. It is not affiliated with, endorsed by, or operated by OpenClaw.