Tailscale is a zero-config VPN service built on top of Wireguard. It's great for accessing devices and applications behind firewalls, and you can use it to connect to all your private services on Render with this repo.

A Tailscale subnet router acts as a gateway to your Render private network, enabling connections to any and all internal IPs (of the form 10.x.x.x) in your Render network.

Use the button below to deploy a Tailscale subnet router on Render. Generate a Tailscale auth key and enter it when prompted. Use a one-off key for maximum security.

Deploying this repo will create a subnet router in your Tailscale network. The first time you deploy, you'll need to enable the subnet routes you want access to from the Tailscale admin panel. Once the subnet router is up and running, you can connect to other private services in your Render network. To find the internal IP address for a Render private service, go to the web shell for your subnet router service and run dig with the private service's host name as the only argument.