tailscale-runpod

Name: tailscale-runpod
Availability: InStock
Author: Koshi

Configure Tailscale mesh VPN for direct SSH access to cloud GPU instances.

1|Updated Jan 30, 2026

Search Tags:#container #ssh #tailscale #runpod #cloudgpu #mesh-vpn

Ready to run

npx skills add https://github.com/koshimazaki/tailscale-runpod --skill tailscale-runpod

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: tailscale-runpod
Source: https://github.com/koshimazaki/tailscale-runpod/tree/main
Command: npx skills add https://github.com/koshimazaki/tailscale-runpod --skill tailscale-runpod

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cloud GPU instances are often behind NATs or firewalls, making secure SSH access difficult without exposing ports. This guide explains how to leverage the Tailscale mesh VPN to provide direct, authenticated access to RunPod, Vast.ai, Lambda Labs, and Paperspace, with a persistent IP and no public exposure.

Core Features & Use Cases

Direct SSH access without port forwarding
Persistent IP across pod restarts
Secure end-to-end encryption via WireGuard
No exposed ports to the public internet

Quick Start

Install tailscale, start tailscaled in container mode with a persistent state path, and enable SSH access by running tailscale up --ssh.

Frequently Asked Questions about tailscale-runpod

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I SSH into cloud GPU instances without exposing public ports?▼

You can SSH into cloud GPU instances securely by installing Tailscale and running tailscale up --ssh to establish a mesh VPN connection. This provides direct, authenticated access without port forwarding or public exposure.

Can I keep the same IP address for my RunPod instance across pod restarts?▼

Yes, you can maintain a persistent IP across pod restarts by configuring Tailscale with a persistent state path. This ensures your mesh VPN identity and IP assignment survive container restarts on cloud GPU platforms.

Does Tailscale work with Vast.ai and Lambda Labs containers?▼

Yes, Tailscale works with Vast.ai, Lambda Labs, Paperspace, and RunPod containers. You achieve direct SSH access by starting tailscaled with --tun=userspace-networking, which is specifically designed for container environments.

What is the best way to set up Tailscale SSH in a container environment?▼

The best way to set up Tailscale SSH in a container is to start tailscaled using the --tun=userspace-networking flag and enable the SSH server with tailscale up --ssh. This ensures end-to-end WireGuard encryption without requiring host network privileges.

Why do I need userspace networking for Tailscale on cloud GPUs?▼

You need userspace networking (--tun=userspace-networking) for Tailscale on cloud GPUs because container environments often lack the permissions required for standard TUN device access. This flag allows the mesh VPN to operate within container constraints.

How does WireGuard encryption protect SSH access to cloud GPUs?▼

WireGuard encryption protects SSH access by creating a secure end-to-end tunnel through the Tailscale mesh VPN. This ensures that only authenticated devices on your tailnet can reach the cloud GPU instance, eliminating public internet exposure.