Headscale pricing (2026): the licence is free, the server is not

Affiliate disclosure - This article contains a Contabo affiliate link. If you rent a VPS through it, we earn a commission at no extra cost to you. Every figure below was read from the projects' own pages on 20 August 2026 and is quoted with its source; we have not benchmarked anything here.

If you searched "Headscale pricing", the short answer is going to disappoint whoever wrote the pricing page you expected to find: there isn't one. Headscale is published under the BSD 3-Clause licence. No tiers, no seats, no enterprise edition, no invoice.

That is the easy half of the answer. The useful half is: then what does it cost? Because "free software" and "free to run" are two very different sentences, and for a control plane that has to be reachable around the clock, the gap between them is where the real number lives.

What the licence gives you

Headscale's repository describes it as "An open source, self-hosted implementation of the Tailscale control server". It is written in Go, and as of 20 August 2026 the GitHub API reports 43,007 stars and the licence as BSD-3-Clause.

BSD-3-Clause is about as permissive as licences get. You may run it, change it, and deploy it inside a commercial setup without paying anyone and without opening your own code. So the licence column of your spreadsheet is genuinely zero — that part of the marketing is true.

The honest comparison: below six users, don't self-host

Here is the part we would rather not write, since this site earns a commission when someone rents a server. It is still true.

Tailscale's own pricing page lists the Personal plan at "$0 Free forever", for "Up to 6 users" with "Unlimited user devices". If you are one person with fifteen devices, or a family, or a three-person side project, you are inside that limit. Tailscale will cost you nothing, and Headscale will cost you a server. Self-hosting is the more expensive option in that situation, and no amount of enthusiasm for self-hosting changes the arithmetic.

The picture flips as soon as you leave the free plan. Tailscale Standard is listed at $8 per user per month, and Premium at $18 per user per month. At seven users, Standard is $56 a month. A small VPS is a fraction of that, and it does not get more expensive when you add the eighth person — which is the structural difference: Tailscale bills per user, a server bills per server.

A blue-lit data-centre aisle with an unplugged monitor on the floor and cabling left hanging. Stock photo — not a picture of a Headscale deployment.

So what do you actually pay?

Three line items, and only one of them has a price tag.

1. The server. Headscale is a control plane. It coordinates — node registration, keys, ACLs — while your actual traffic goes peer-to-peer over WireGuard between your devices. It never sees your packets. That is why it stays small: a modest always-on VPS with a public IP is enough, and this is not a workload that needs a large machine.

2. The name and the certificate. A domain, and TLS. Let's Encrypt makes the certificate itself free, so this line is close to zero — but it is not zero effort, because a control plane that fails its renewal is a control plane your devices stop trusting.

3. Your time. Upgrades, database backups, and being the person who gets woken up. This is the cost that no comparison table contains and the one that most often decides the question. If nobody on your team wants to own it, the $8 per user is buying something real.

The one case where the sizing changes

Headscale being a control plane is what keeps it cheap — but there is an exception worth knowing before you size anything.

When two of your devices cannot reach each other directly (both behind restrictive NAT, for instance), Tailscale-style networks fall back to a relay. Relayed traffic is real traffic, and if you self-host that relay too, you stop paying for a small coordination server and start paying for bandwidth. That is a different budget entirely. Plenty of Headscale setups avoid it by leaning on the public relays, and that is a decision to make deliberately rather than discover on your first invoice.

What to run it on

If you have passed the six-user line, or if the point of the exercise is that nobody else holds your coordination keys, then the whole cost of Headscale is one small always-on machine.

A Contabo Cloud VPS is more than enough for a control plane — the same class of box that would host a plain WireGuard server. The specification you need here is not CPU, it is uptime and a stable public IP: when the control plane is unreachable, new devices cannot join and key rotation stalls, even though existing peer-to-peer tunnels keep running.

And whichever side of the line you land on, remember what this is buying. A mesh VPN decides which machines can reach each other. It does not decide what your browser tells every website you open.